YunoHost/SSOwat
1
0
Fork 0
mirror of https://github.com/YunoHost/SSOwat.git synced 2024-09-03 20:06:27 +02:00
Code Issues Projects Releases Packages Wiki Activity

[fix] Remove SSO DEBUG

Browse source
This commit is contained in:
ljf (zamentur) 2019-10-28 00:52:03 +01:00 • committed by GitHub
parent 8433de3fe2
commit f92ab60b39
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
access.lua
View file

@ -30,7 +30,6 @@ ngx.header["X-SSO-WAT"] = "You've just been SSOed"
-- Quick fix for CVE-2019-11043 about php-fpm and nginx -- Quick fix for CVE-2019-11043 about php-fpm and nginx
local loweruri = string.lower(ngx.var.uri) local loweruri = string.lower(ngx.var.uri)
ngx.header["X-SSO-DEBUG"] = loweruri
if string.match(loweruri, "\n") or string.match(loweruri, "\r") then if string.match(loweruri, "\n") or string.match(loweruri, "\r") then
return ngx.exit(ngx.HTTP_FORBIDDEN) return ngx.exit(ngx.HTTP_FORBIDDEN)
end end