Mercurial > hg > nginx-quic
view misc/README @ 6243:4821fc788c12
Cache: check the whole cache key in addition to hashes.
This prevents a potential attack that discloses cached data if an attacker
will be able to craft a hash collision between some cache key the attacker
is allowed to access and another cache key with protected data.
See http://mailman.nginx.org/pipermail/nginx-devel/2015-September/007288.html.
Thanks to Gena Makhomed and Sergey Brester.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Fri, 11 Sep 2015 17:03:56 +0300 |
parents | 001beb963d86 |
children |
line wrap: on
line source
make -f misc/GNUmakefile release the required tools: *) xsltproc to build CHANGES, *) xslscript.pl ( http://hg.nginx.org/xslscript ) to build XSLTs from XSLScript sources. make -f misc/GNUmakefile icons the required tool: *) netpbm to create Win32 icons from xpm sources.