tree 90806d4643b0a7e570ed2b67b497b766b10034c0
parent 26ee40b94acd89d62da6eaff51a4a73d8e409dd1
author Maxim Dounin <mdounin@mdounin.ru> 1441980236 +0300
committer Maxim Dounin <mdounin@mdounin.ru> 1441980236 +0300

Cache: check the whole cache key in addition to hashes.

This prevents a potential attack that discloses cached data if an attacker
will be able to craft a hash collision between some cache key the attacker
is allowed to access and another cache key with protected data.

See http://mailman.nginx.org/pipermail/nginx-devel/2015-September/007288.html.

Thanks to Gena Makhomed and Sergey Brester.