Mercurial > hg > nginx
view src/http/modules/perl/ngx_http_perl_module.h @ 9287:32d4582c484d
Mail: fixed EXTERNAL to be accepted only if enabled.
As originally implemented in 6774:bcb107bb89cd, it wasn't possible to
disable the EXTERNAL authentication method: it was always accepted
(but not advertised unless enabled). It is, however, believed that
it is better to reject attempts to use the disabled method, hence in
6869:b2915d99ee8d an attempt was made to address this. This attempt
was insufficient though: it was still possible to use the method as long
as initial SASL response was used.
With this patch both challenge-response and initial response forms are
disabled. Additionally, initial response handling for the PLAIN
authentication is removed from ngx_mail_auth_parse(), for consistency
and to don't provoke such bugs.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Mon, 03 Jun 2024 18:03:05 +0300 |
parents | 975d7ab37b39 |
children |
line wrap: on
line source
/* * Copyright (C) Igor Sysoev * Copyright (C) Nginx, Inc. */ #ifndef _NGX_HTTP_PERL_MODULE_H_INCLUDED_ #define _NGX_HTTP_PERL_MODULE_H_INCLUDED_ #include <ngx_config.h> #include <ngx_core.h> #include <ngx_http.h> #include <nginx.h> #include <EXTERN.h> #include <perl.h> typedef ngx_http_request_t *nginx; typedef struct { ngx_http_request_t *request; ngx_str_t filename; ngx_str_t redirect_uri; SV *next; ngx_int_t status; unsigned done:1; unsigned error:1; unsigned variable:1; unsigned header_sent:1; ngx_array_t *variables; /* array of ngx_http_perl_var_t */ #if (NGX_HTTP_SSI) ngx_http_ssi_ctx_t *ssi; #endif } ngx_http_perl_ctx_t; typedef struct { ngx_uint_t hash; ngx_str_t name; ngx_str_t value; } ngx_http_perl_var_t; extern ngx_module_t ngx_http_perl_module; /* * workaround for "unused variable `Perl___notused'" warning * when building with perl 5.6.1 */ #ifndef PERL_IMPLICIT_CONTEXT #undef dTHXa #define dTHXa(a) #endif extern void boot_DynaLoader(pTHX_ CV* cv); void ngx_http_perl_handle_request(ngx_http_request_t *r); void ngx_http_perl_sleep_handler(ngx_http_request_t *r); #endif /* _NGX_HTTP_PERL_MODULE_H_INCLUDED_ */