~guilhem-fr/nginx/nginx-1.0

Viewing all changes in revision 3344.

  • Committer: mdounin
  • Date: 2012-03-05 12:49:32 UTC
  • Revision ID: svn-v4:73f98a42-aea0-e011-b76d-00259023448c:branches/stable-1.0:4512
Merge of r4473:

Core: protection from cycles with named locations and post_action.

Now redirects to named locations are counted against normal uri changes
limit, and post_action respects this limit as well.  As a result at least
the following (bad) configurations no longer trigger infinite cycles:

1. Post action which recursively triggers post action:

    location / {
        post_action /index.html;
    }

2. Post action pointing to nonexistent named location:

    location / {
        post_action @nonexistent;
    }

3. Recursive error page for 500 (Internal Server Error) pointing to
   a nonexistent named location:

    location / {
        recursive_error_pages on;
        error_page 500 @nonexistent;
        return 500;
    }

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: