)]}'
{
  "commit": "6000f4ad6d1e5ea69b3e0925217d08401a3d1774",
  "tree": "36a96b5002438cb52da3a736362c0f8accbaa3e7",
  "parents": [
    "f61612532cb53e89cd6b27d24c9112a07021b6e3"
  ],
  "author": {
    "name": "Valentin Bartenev",
    "email": "vbart@nginx.com",
    "time": "Wed Feb 27 17:38:54 2013 +0000"
  },
  "committer": {
    "name": "Valentin Bartenev",
    "email": "vbart@nginx.com",
    "time": "Wed Feb 27 17:38:54 2013 +0000"
  },
  "message": "SNI: reset to default server if requested host was not found.\n\nNot only this is consistent with a case without SNI, but this also\nprevents abusing configurations that assume that the $host variable\nis limited to one of the configured names for a server.\n\nAn example of potentially unsafe configuration:\n\n  server {\n      listen 443 ssl default_server;\n      ...\n  }\n\n  server {\n      listen 443;\n      server_name example.com;\n\n      location / {\n          proxy_pass http://$host;\n      }\n  }\n\nNote: it is possible to negotiate \"example.com\" by SNI, and to request\narbitrary host name that does not exist in the configuration above.\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "44c5009bd692b72ffab57b7c47a6b0ec2b135c69",
      "old_mode": 33188,
      "old_path": "src/http/ngx_http_request.c",
      "new_id": "bb4cacabd158f234dcf499f798a79570d1e483cb",
      "new_mode": 33188,
      "new_path": "src/http/ngx_http_request.c"
    }
  ]
}