Mercurial > hg > nginx
comparison src/http/modules/ngx_http_log_module.c @ 4191:08d8af70760c
Improved access log escaping to better protect other software.
Some character sets (notably ISO-8859-1) have C1 control characters in
upper half, make sure to escape them.
Reported by Jesus Olmos Gonzalez.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Tue, 11 Oct 2011 17:54:38 +0000 |
parents | 59b99f217c6d |
children | 73d37e1ccb91 |
comparison
equal
deleted
inserted
replaced
4190:d434191a147f | 4191:08d8af70760c |
---|---|
688 | 688 |
689 /* _^]\ [ZYX WVUT SRQP ONML KJIH GFED CBA@ */ | 689 /* _^]\ [ZYX WVUT SRQP ONML KJIH GFED CBA@ */ |
690 0x10000000, /* 0001 0000 0000 0000 0000 0000 0000 0000 */ | 690 0x10000000, /* 0001 0000 0000 0000 0000 0000 0000 0000 */ |
691 | 691 |
692 /* ~}| {zyx wvut srqp onml kjih gfed cba` */ | 692 /* ~}| {zyx wvut srqp onml kjih gfed cba` */ |
693 0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */ | 693 0x80000000, /* 1000 0000 0000 0000 0000 0000 0000 0000 */ |
694 | 694 |
695 0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */ | 695 0xffffffff, /* 1111 1111 1111 1111 1111 1111 1111 1111 */ |
696 0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */ | 696 0xffffffff, /* 1111 1111 1111 1111 1111 1111 1111 1111 */ |
697 0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */ | 697 0xffffffff, /* 1111 1111 1111 1111 1111 1111 1111 1111 */ |
698 0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */ | 698 0xffffffff, /* 1111 1111 1111 1111 1111 1111 1111 1111 */ |
699 }; | 699 }; |
700 | 700 |
701 | 701 |
702 if (dst == NULL) { | 702 if (dst == NULL) { |
703 | 703 |