You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
17 lines
436 B
17 lines
436 B
6 years ago
|
|
||
|
|
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5387
|
||
|
|
|
||
|
|
--- httpd-2.4.6/server/util_script.c.cve5387
|
||
|
|
+++ httpd-2.4.6/server/util_script.c
|
||
|
|
@@ -190,6 +190,10 @@
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
#endif
|
||
|
|
+ else if (!strcasecmp(hdrs[i].key, "Proxy")) {
|
||
|
|
+ /* Don't pass through HTTP_PROXY */
|
||
|
|
+ continue;
|
||
|
|
+ }
|
||
|
|
else
|
||
|
|
add_unless_null(e, http2env(r, hdrs[i].key), hdrs[i].val);
|
||
|
|
}
|