Skip to content

fix(proxy-rewrite): escape args part if it's not from user conf#8888

Merged
spacewander merged 2 commits into
apache:masterfrom
spacewander:deg
Feb 24, 2023
Merged

fix(proxy-rewrite): escape args part if it's not from user conf#8888
spacewander merged 2 commits into
apache:masterfrom
spacewander:deg

Conversation

@spacewander

Copy link
Copy Markdown
Member

Description

Fixes #8877

Checklist

  • I have explained the need for this PR and the problem it solves
  • I have explained the changes or the new features added to this PR
  • I have added tests corresponding to this change
  • I have updated the documentation to reflect this change
  • I have verified that this change is backward compatible (If not, please discuss on the APISIX mailing list first)

leslie-tsang
leslie-tsang previously approved these changes Feb 22, 2023
soulbird
soulbird previously approved these changes Feb 22, 2023
Signed-off-by: spacewander <[email protected]>
@spacewander
spacewander merged commit c70c33e into apache:master Feb 24, 2023
@spacewander
spacewander deleted the deg branch February 24, 2023 01:31
spacewander added a commit to spacewander/incubator-apisix that referenced this pull request Mar 1, 2023
spacewander added a commit to spacewander/incubator-apisix that referenced this pull request Mar 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug: The proxy-rewrite plugin may cause CRLF injection vulnerabilities

4 participants