nginx 'autoindex' module bug: patch committed
Posted 02-07-2010 at 05:17 PM by Web31337
Two or three days ago I was cleaning up my webserver hosts, and adding some stuff.
Occasionally, I've created a file with name containing '?'(question sign) in it. This directory had autoindex enabled, served by nginx.
I've tried to view the directory listing in my browser(just to see how it is shown) and found a bug: autoindex module wasn't URL-encoding the question sign. So it resulted in request to /somedir/filename instead of /somedir/filename%3f as it should have been.
This bug is present still, in nginx 0.8.33/0.7.65/0.6.39, but there is a patch released for that today by Maxim Dounin.
It's always good to know that you helped somehow. Yeah, that's cool when you find a bug and report it, and since I use that webserver in production environment that is twice useful.
I've successfully tested the patch: it works perfect here on 0.7.65. Waiting for next release
Oh and btw, about that OpenSSH patch, I've also reported that to OpenSSH-dev team: maillist thread. Probably this feature will be merged in future releases. Thanks to santana for this smart question. I've been looking for that as well at the time.
Occasionally, I've created a file with name containing '?'(question sign) in it. This directory had autoindex enabled, served by nginx.
I've tried to view the directory listing in my browser(just to see how it is shown) and found a bug: autoindex module wasn't URL-encoding the question sign. So it resulted in request to /somedir/filename instead of /somedir/filename%3f as it should have been.
This bug is present still, in nginx 0.8.33/0.7.65/0.6.39, but there is a patch released for that today by Maxim Dounin.
It's always good to know that you helped somehow. Yeah, that's cool when you find a bug and report it, and since I use that webserver in production environment that is twice useful.
I've successfully tested the patch: it works perfect here on 0.7.65. Waiting for next release
Oh and btw, about that OpenSSH patch, I've also reported that to OpenSSH-dev team: maillist thread. Probably this feature will be merged in future releases. Thanks to santana for this smart question. I've been looking for that as well at the time.
Total Comments 0
