Nginx and ../../ requests

fipa · July 7, 2010, 7:00pm

Hi,

How does Nginx behave against …/…/ hackish requests? Does it allow
requests to go outside of the root directive?

fipa · July 7, 2010, 7:56pm

On Wed, Jul 07, 2010 at 07:00:28PM +0200, Fernando P. wrote:

How does Nginx behave against …/…/ hackish requests? Does it allow
requests to go outside of the root directive?

No, it does not allow.

fipa · July 7, 2010, 8:56pm

No, it does not allow.

Thanks Igor.

fipa · July 8, 2010, 12:14am

Hi,

Is this the same behavior when it’s proxying requests to another server
(apache/ruby/fastcgi, etc)?

Thanks

fipa · July 8, 2010, 8:13am

On Wed, Jul 07, 2010 at 06:14:04PM -0400, nfn wrote:

Hi,

Is this the same behavior when it’s proxying requests to another server
(apache/ruby/fastcgi, etc)?

Yes.

fipa · July 8, 2010, 10:12am

Thanks Igor!