Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
hn92726819
22 days ago
|
parent
|
context
|
favorite
| on:
.localhost Domains
I'm not that familiar with nginx config. Does this protect against path traversal? Ex: host=../../../docker.sock
sigil
22 days ago
[–]
nginx validates hostnames per the spec, and to your question specifically it rejects requests that would put a slash in $host:
https://github.com/nginx/nginx/blob/b6e7eb0f5792d7a52d2675ee...
Join us for
AI Startup School
this June 16-17 in San Francisco!
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: