diff options
| author | Stefan Bühler <stbuehler@web.de> | 2008-12-07 15:22:42 +0000 |
|---|---|---|
| committer | Stefan Bühler <stbuehler@web.de> | 2008-12-07 15:22:42 +0000 |
| commit | 36f74e5d23e4d64a123c9ebf0822dd940c896e27 (patch) | |
| tree | 59ae0a54421cfc4d6c576cafdc875ada1ef971ee /tests/proxy.conf | |
| parent | a64e7cd46b6b7b0e96745c68d0c3618e2402bbfa (diff) | |
| download | lighttpd-git-36f74e5d23e4d64a123c9ebf0822dd940c896e27.tar.gz | |
Revert url decoding+simplifying before matching of mod_rewrite/mod_redirect
- Lot of regressions (we forgot to reencode the result)
- Generic problem: after decode and rewrite "a?b?c": which '?' was the path?query seperator?
- Possible solution: only decode printable characters (without '?'), and encode the result; do not encode the '%' of a not decoded character.
- Still a problem with path simplifying, it seems many people use urls like this: http://server1/http%3a//server2/xxx
and rewrite the path into the querystring.
- Probably only usable with an extra config option
=> Do NOT use rewrite/redirect to protect specific urls.
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2362 152afb58-edef-0310-8abb-c4023f1b3aa9
Diffstat (limited to 'tests/proxy.conf')
| -rw-r--r-- | tests/proxy.conf | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/tests/proxy.conf b/tests/proxy.conf index 2071f838..769cf69a 100644 --- a/tests/proxy.conf +++ b/tests/proxy.conf @@ -122,7 +122,8 @@ url.access-deny = ( "~", ".inc") url.redirect = ( "^/redirect/$" => "http://localhost:2048/" ) url.rewrite = ( "^/rewrite/foo($|\?.+)" => "/indexfile/rewrite.php$1", - "^/rewrite/bar(?:$|\?(.+))" => "/indexfile/rewrite.php?bar&$1" ) + "^/rewrite/bar(?:$|\?(.+))" => "/indexfile/rewrite.php?bar&$1", + "^/rewrite/all(/.*)$" => "/indexfile/rewrite.php?$1" ) expire.url = ( "/expire/access" => "access 2 hours", "/expire/modification" => "access plus 1 seconds 2 minutes") |