diff options
author | Ruediger Pluem <rpluem@apache.org> | 2023-03-13 10:24:30 +0000 |
---|---|---|
committer | Ruediger Pluem <rpluem@apache.org> | 2023-03-13 10:24:30 +0000 |
commit | 2fa15c2c06213dc516a5383faa4bce3c74b9286a (patch) | |
tree | c1e52339f902c0ef594e99cc55562f207adb5955 /changes-entries | |
parent | 06af1142a67222711f136f7fc195a011d27a2982 (diff) | |
download | httpd-2fa15c2c06213dc516a5383faa4bce3c74b9286a.tar.gz |
Do not double encode encoded slashes
In case that AllowEncodedSlashes is set to NoDecode do not double encode
encoded slashes in the URL sent by the reverse proxy to the backend.
* include/ap_mmn.h: Document the addition of ap_proxy_canonenc_ex to the API.
* modules/proxy/mod_proxy.h: Declare ap_proxy_canonenc_ex and define flag
values.
* modules/proxy/proxy_util.c: Implement ap_proxy_canonenc_ex by modifying
ap_proxy_canonenc accordingly and reimplement ap_proxy_canonenc to
use ap_proxy_canonenc_ex with the appropriate flag.
* modules/http2/mod_proxy_http2.c, modules/proxy/mod_proxy_*.c: Set the
correct flag based on the AllowEncodedSlashes configuration and use
ap_proxy_canonenc_ex instead of ap_proxy_canonenc.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1908341 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'changes-entries')
-rw-r--r-- | changes-entries/nodoubleencodeencodedslash.txt | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/changes-entries/nodoubleencodeencodedslash.txt b/changes-entries/nodoubleencodeencodedslash.txt new file mode 100644 index 0000000000..a111ede0ed --- /dev/null +++ b/changes-entries/nodoubleencodeencodedslash.txt @@ -0,0 +1,4 @@ + + *) mode_proxy: In case that AllowEncodedSlashes is set to NoDecode do not + double encode encoded slashes in the URL sent by the reverse proxy to the + backend. [Ruediger Pluem] |