Well this is interesting. Since this situation should never happen (I think) in real life, should this code be always implemented? Any downsides? -------- If requests without the “Host” header field should not be allowed, a server that just drops the requests can be defined: server { listen 80; server_name ""; return 444; } Here, the server name is set to an empty string that will match requests without the “Host” header field, and a special nginx’s non-standard code 444 is returned that closes the connection. Since version 0.8.48, this is the default setting for the server name, so the
On 5/19/2017 4:02 PM, li...@lazygranch.com wrote:
I stand corrected. Here's a better reference: http://nginx.org/en/docs/http/request_processing.html |
_______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx