3 Commits (6e8c1b2871673361d912d4205fa72c623555f096)

Author	SHA1	Message	Date
yungchin	6e8c1b2871	nginx-http-auth filter: match server_name = "" ... As documented at http://nginx.org/en/docs/http/server_names.html#miscellaneous_names "If no server_name is defined in a server block then nginx uses the empty name as the server name." This regex change allows us to match error output for such a configuration. The log line added to the tests was lifted from our logs verbatim; it did not match without the patched regex. Signed-off-by: Yung-Chin Oei <yungchin@yungchin.nl>	2014-04-03 11:04:21 +01:00
Yaroslav Halchenko	ac061155f0	BF: anchor introduced nginx-http-auth at the end ... needed since request probably could be not a correct HTTP statement but continue with all those to match till the end and then injected ", client: VICTIM, server..." thus allowing injection. We better anchor at the end then	2013-11-08 14:40:52 -08:00
Daniel Black	a148d35d70	ENH: add filter.d/nginx-http-auth. Partially forfills #405	2013-11-08 10:06:40 +11:00