Hacker News new | past | comments | ask | show | jobs | submit login

I'm not that familiar with nginx config. Does this protect against path traversal? Ex: host=../../../docker.sock



nginx validates hostnames per the spec, and to your question specifically it rejects requests that would put a slash in $host: https://github.com/nginx/nginx/blob/b6e7eb0f5792d7a52d2675ee...




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: