| commit | db80a7adfc1636ef146006b652c1892d42847ccd | [log] [tgz] |
|---|---|---|
| author | Maxim Dounin <mdounin@mdounin.ru> | Tue Jun 05 13:36:09 2012 +0000 |
| committer | Maxim Dounin <mdounin@mdounin.ru> | Tue Jun 05 13:36:09 2012 +0000 |
| tree | 91b2e27391e502b24b7abbb8e073b0724c539366 | |
| parent | ac7f704931d8e12fc48106543b36ea2e01627e61 [diff] |
Win32: disallowed access to various non-canonical name variants. This includes trailings dots and spaces, NTFS streams (and short names, as previously checked). The checks are now also done in ngx_file_info(), thus allowing to use the "try_files" directive to protect external scripts.