comparison src/core/ngx_string.h @ 1298:458e041fc902

msie_refresh should escape at least '"' to prevent XSS
author Igor Sysoev <igor@sysoev.ru>
date Fri, 13 Jul 2007 09:37:01 +0000
parents 5eae5751507f
children 33d6c994a0b2
comparison
equal deleted inserted replaced
1297:4ec0bc95172b 1298:458e041fc902
140 140
141 141
142 #define NGX_ESCAPE_URI 0 142 #define NGX_ESCAPE_URI 0
143 #define NGX_ESCAPE_ARGS 1 143 #define NGX_ESCAPE_ARGS 1
144 #define NGX_ESCAPE_HTML 2 144 #define NGX_ESCAPE_HTML 2
145 #define NGX_ESCAPE_REFRESH 3
145 146
146 #define NGX_UNESCAPE_URI 1 147 #define NGX_UNESCAPE_URI 1
147 148
148 uintptr_t ngx_escape_uri(u_char *dst, u_char *src, size_t size, 149 uintptr_t ngx_escape_uri(u_char *dst, u_char *src, size_t size,
149 ngx_uint_t type); 150 ngx_uint_t type);