diff options
| author | Glenn Strauss <gstrauss@gluelogic.com> | 2019-05-04 17:36:31 -0400 |
|---|---|---|
| committer | Glenn Strauss <gstrauss@gluelogic.com> | 2019-05-04 17:48:04 -0400 |
| commit | 1cf68f79eb1d57b279c906ee1e04c233c0bca615 (patch) | |
| tree | a9a6397ef57d574217cc587220a166a8068fea37 /tests/mod-proxy.t | |
| parent | 49e9f0acdcd68bb9b7e4b30b41a95cb5b8c8b811 (diff) | |
| download | lighttpd-git-1cf68f79eb1d57b279c906ee1e04c233c0bca615.tar.gz | |
[core] behavior change: stricter URL normalization
behavior change: stricter URL normalization
Prior behavior can be obtained by configuring lighttpd.conf with:
server.http-parseopts = (“url-normalize” => “disable” )
although this is not recommended.
This behavior change was pre-announced with the releases of
lighttpd 1.4.52 (2018.11.28)
lighttpd 1.4.53 (2019.01.27)
The recommended settings are:
server.http-parseopts = (
"header-strict" => "enable",
"host-strict" => "enable",
"host-normalize" => "enable",
"url-normalize" => "enable",
"url-normalize-unreserved" => "enable",
"url-normalize-required" => "enable",
"url-ctrls-reject" => "enable",
"url-path-2f-decode" => "enable",
"url-path-backslash-trans" => "enable",
"url-path-dotseg-remove" => "enable",
"url-query-20-plus" => "enable"
)
The lighttpd defaults with this commit are slightly less strict:
server.http-parseopts = (
"header-strict" => "enable",
"host-strict" => "enable",
"host-normalize" => "enable",
"url-normalize" => "enable",
"url-normalize-unreserved" => "enable",
#"url-normalize-required" => "enable",
"url-ctrls-reject" => "enable",
"url-path-2f-decode" => "enable",
#"url-path-backslash-trans" => "enable",
"url-path-dotseg-remove" => "enable",
#"url-query-20-plus" => "enable"
)
Diffstat (limited to 'tests/mod-proxy.t')
| -rwxr-xr-x | tests/mod-proxy.t | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tests/mod-proxy.t b/tests/mod-proxy.t index d3c18214..50cd1424 100755 --- a/tests/mod-proxy.t +++ b/tests/mod-proxy.t @@ -51,7 +51,7 @@ GET /rewrite/all/some+test%3axxx%20with%20space HTTP/1.0 Host: www.example.org EOF ); - $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 200, 'HTTP-Content' => '/some+test%3axxx%20with%20space' } ]; + $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 200, 'HTTP-Content' => '/some+test%3Axxx%20with%20space' } ]; ok($tf_proxy->handle_http($t) == 0, 'rewrited urls work with encoded path'); ok($tf_proxy->stop_proc == 0, "Stopping lighttpd proxy"); |