ืื ืืืืคึผื ืฆืืืืึทื ืคืื nginx 1.21.1 ืืื ืืืคืจืืื, ืืื ืืืึธืก ืื ืึทื ืืืืืงืืื ื ืคืื ื ืืึท ืคึฟืขืึดืงืืืื ืืืื (ืืื ืื ืคึผืึทืจืึทืืขื ืืขืฉืืืฆื ืกืืึทืืื ืฆืืืืึทื 1.20, ืืืืื ืขื ืืขืจืื ืืขื ืฉืืึทืืืช ืฆื ืื ืืืืืึทื ืืืฉืึทื ืคืื ืขืจื ืกื ืขืจืจืึธืจืก ืืื ืืืึทืื ืขืจืึทืืืืืืื ืืขื ืขื ืืขืืืื).
ืืืืคึผื ืขื ืืขืจืื ืืขื:
- Nginx ืืืฆื ืฉืืขื ืืืง ืงืขืจื ืึท ืืขืืช ืืืขื ื ืืฆื ืื CONNECT ืืืคึฟื; ืืืขื ืกืืืืึทืืืืื ืืึทืกืื ืกืคึผืขืฆืืคืืฆืืจื ืื "ืืื ืืึทืื-ืืขื ื" ืืื "ืืจืึทื ืกืคืขืจ-ืขื ืงืึธืืื ื" ืืขืืขืจื; ืืืขื ืขืก ืืขื ืขื ืกืคึผืืืกืึทื ืึธืืขืจ ืงืึธื ืืจืึธื ืืืชืืืช ืืื ืื ืึธื ืคึฟืจืขื ืฉืืจืืงื, ืื HTTP ืืขืืขืจ ื ืึธืืขื ืึธืืขืจ ืื ืืึธืกื ืืขืืขืจ ืืืขืจื.
- ืืืคึผืจืืืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืขืกืืื ื ืืืขื ื ืืฆื ืงืืืคื ืฆืืืขืืขืจื ืกืึทืงืึทืฅ.
- ืึทื ืืืืืคื ืคืื ืื ืืืชืืืช "", "", "\", "^", "`", "{", "|" ืืื ืืืคึผืจืืืื. ืืื "}" ืืืขื ืคึผืจืึทืงืกืืื ื ืืื ืึท URI ืขื ืืขืจืื ื.
- ืจืืืืกื ืืึผืจืื ืงืึทื ืกืึทืืฉืึทื ืคึฟืึทืจ ืืึทื ื-ืคึผืจืึทืกืขืกืื ื ืจืืงืืืขืก ืืืขื ืคึผืจืึทืงืกืืื ื ื ืืฆื ืืขืจ ืืื 64 ืืึทืคืขืจื.
ืืงืืจ: opennet.ru