comparison src/http/ngx_http_request.h @ 7877:63c66b7cc07c

Added CONNECT method rejection. No valid CONNECT requests are expected to appear within nginx, since it is not a forward proxy. Further, request line parsing will reject proper CONNECT requests anyway, since we don't allow authority-form of request-target. On the other hand, RFC 7230 specifies separate message length rules for CONNECT which we don't support, so make sure to always reject CONNECTs to avoid potential abuse.
author Maxim Dounin <mdounin@mdounin.ru>
date Mon, 28 Jun 2021 18:01:04 +0300
parents 8989fbd2f89a
children 52338ddf9e2f
comparison
equal deleted inserted replaced
7876:b290610bf812 7877:63c66b7cc07c
23 #define NGX_HTTP_VERSION_9 9 23 #define NGX_HTTP_VERSION_9 9
24 #define NGX_HTTP_VERSION_10 1000 24 #define NGX_HTTP_VERSION_10 1000
25 #define NGX_HTTP_VERSION_11 1001 25 #define NGX_HTTP_VERSION_11 1001
26 #define NGX_HTTP_VERSION_20 2000 26 #define NGX_HTTP_VERSION_20 2000
27 27
28 #define NGX_HTTP_UNKNOWN 0x0001 28 #define NGX_HTTP_UNKNOWN 0x00000001
29 #define NGX_HTTP_GET 0x0002 29 #define NGX_HTTP_GET 0x00000002
30 #define NGX_HTTP_HEAD 0x0004 30 #define NGX_HTTP_HEAD 0x00000004
31 #define NGX_HTTP_POST 0x0008 31 #define NGX_HTTP_POST 0x00000008
32 #define NGX_HTTP_PUT 0x0010 32 #define NGX_HTTP_PUT 0x00000010
33 #define NGX_HTTP_DELETE 0x0020 33 #define NGX_HTTP_DELETE 0x00000020
34 #define NGX_HTTP_MKCOL 0x0040 34 #define NGX_HTTP_MKCOL 0x00000040
35 #define NGX_HTTP_COPY 0x0080 35 #define NGX_HTTP_COPY 0x00000080
36 #define NGX_HTTP_MOVE 0x0100 36 #define NGX_HTTP_MOVE 0x00000100
37 #define NGX_HTTP_OPTIONS 0x0200 37 #define NGX_HTTP_OPTIONS 0x00000200
38 #define NGX_HTTP_PROPFIND 0x0400 38 #define NGX_HTTP_PROPFIND 0x00000400
39 #define NGX_HTTP_PROPPATCH 0x0800 39 #define NGX_HTTP_PROPPATCH 0x00000800
40 #define NGX_HTTP_LOCK 0x1000 40 #define NGX_HTTP_LOCK 0x00001000
41 #define NGX_HTTP_UNLOCK 0x2000 41 #define NGX_HTTP_UNLOCK 0x00002000
42 #define NGX_HTTP_PATCH 0x4000 42 #define NGX_HTTP_PATCH 0x00004000
43 #define NGX_HTTP_TRACE 0x8000 43 #define NGX_HTTP_TRACE 0x00008000
44 #define NGX_HTTP_CONNECT 0x00010000
44 45
45 #define NGX_HTTP_CONNECTION_CLOSE 1 46 #define NGX_HTTP_CONNECTION_CLOSE 1
46 #define NGX_HTTP_CONNECTION_KEEP_ALIVE 2 47 #define NGX_HTTP_CONNECTION_KEEP_ALIVE 2
47 48
48 49