diff options
author | David Timber <dxdt@dev.snart.me> | 2025-04-06 19:10:09 +0200 |
---|---|---|
committer | David Timber <dxdt@dev.snart.me> | 2025-04-06 19:10:09 +0200 |
commit | 9cb1228294e248e82f701093cb983c1317ee65c0 (patch) | |
tree | 7a7c857d8bcfa67e1d124ea703b7aad6d332b68e /writeups/hackintosh/cloud%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252Blibvirt.ko.md | |
parent | 7ffb24a6eeb0513702051075decc613d013284db (diff) |
Regex capture groups returned from Nginx's `set` directive are not
"normalized". As a result, the cgit backend was getting undecoded
PATH_INFO, rendering some files with special characters inaccessible
and some web crawlers recursively accessing broken links(%25252525 ...)
- https://serverfault.com/questions/832040/how-can-i-block-all-head-requests-to-urls-that-contain-a-substring-on-apache
- https://nginx.org/en/docs/http/ngx_http_core_module.html#var_uri
Diffstat (limited to 'writeups/hackintosh/cloud%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252Blibvirt.ko.md')
0 files changed, 0 insertions, 0 deletions