)]}'
{
  "commit": "a4a07987c0a27943eaae46d7386a5b51ae4ff0cf",
  "tree": "a36daa678c6b51236368041c38c24dd8000eaccd",
  "parents": [
    "754038a06ffdc127d4e20388aa5764cee271353f"
  ],
  "author": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Mon Jun 28 18:01:18 2021 +0300"
  },
  "committer": {
    "name": "Maxim Dounin",
    "email": "mdounin@mdounin.ru",
    "time": "Mon Jun 28 18:01:18 2021 +0300"
  },
  "message": "Disabled control characters and space in header names.\n\nControl characters (0x00-0x1f, 0x7f), space, and colon were never allowed in\nheader names.  The only somewhat valid use is header continuation which nginx\nnever supported and which is explicitly obsolete by RFC 7230.\n\nPreviously, such headers were considered invalid and were ignored by default\n(as per ignore_invalid_headers directive).  With this change, such headers\nare unconditionally rejected.\n\nIt is expected to make nginx more resilient to various attacks, in particular,\nwith ignore_invalid_headers switched off (which is inherently unsecure, though\nnevertheless sometimes used in the wild).\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "654bd17b92364d2e8edf2945a734a783122a48bc",
      "old_mode": 33188,
      "old_path": "src/http/modules/ngx_http_grpc_module.c",
      "new_id": "65bd1e6c34608f9ebcc798862035084792b12543",
      "new_mode": 33188,
      "new_path": "src/http/modules/ngx_http_grpc_module.c"
    },
    {
      "type": "modify",
      "old_id": "0d36a44e5bb1547f4b793cd3a2bac83f24ff42a8",
      "old_mode": 33188,
      "old_path": "src/http/ngx_http_parse.c",
      "new_id": "6af326deedd1ab890d8908eceb7077f284fe3598",
      "new_mode": 33188,
      "new_path": "src/http/ngx_http_parse.c"
    },
    {
      "type": "modify",
      "old_id": "423667d47338deab68584819674aba29b7e3796b",
      "old_mode": 33188,
      "old_path": "src/http/v2/ngx_http_v2.c",
      "new_id": "3bef002bd719fbbc3ca81ae0962ce9c4215c3be9",
      "new_mode": 33188,
      "new_path": "src/http/v2/ngx_http_v2.c"
    }
  ]
}