view src/os/win32/nginx_icon16.xpm @ 9240:f3df785649ae

Request body: limited chunk extensions and trailer headers. Previously, arbitrary amounts of chunk extensions and trailer headers were accepted and skipped. Despite being under limit_conn / limit_req limits (if configured), this can be a DoS vector, so it is now limited by the client_max_body_size limit. Reported by Bartek Nowotarski.
author Maxim Dounin <mdounin@mdounin.ru>
date Sat, 30 Mar 2024 05:09:35 +0300
parents 4ac89c5aa10d
children
line wrap: on
line source

/* XPM */
static char * nginx_xpm[] = {
"16 16 2 2",
/* colors */
"   c none",
"GG c #009900",
/* pixels */
"                                ",
"        GGGGGGGGGGGGGGGG        ",
"        GGGGGGGGGGGGGGGG        ",
"      GGGGGGGGGGGGGGGGGGGG      ",
"      GGGGGG        GGGGGG      ",
"    GGGGGG            GGGGGG    ",
"    GGGGGG                      ",
"  GGGGGG      GGGGGGGGGGGGGGGG  ",
"  GGGGGG    GGGGGGGGGGGGGGGGGG  ",
"    GGGGGG    GGGGGGGGGGGGGG    ",
"    GGGGGG            GGGGGG    ",
"      GGGGGG        GGGGGG      ",
"      GGGGGGGGGGGGGGGGGGGG      ",
"        GGGGGGGGGGGGGGGG        ",
"        GGGGGGGGGGGGGGGG        ",
"                                "
};