# HG changeset patch # User Maxim Dounin # Date 1582204769 -10800 # Node ID aca005d232ff62a472061f75db9de16ab5316fac # Parent 1055e43e4fab57a61a896b7c170b7b03fdac165c Disabled multiple Transfer-Encoding headers. We anyway do not support more than one transfer encoding, so accepting requests with multiple Transfer-Encoding headers doesn't make sense. Further, we do not handle multiple headers, and ignore anything but the first header. Reported by Filippo Valsorda. diff -r 1055e43e4fab -r aca005d232ff src/http/ngx_http_request.c --- a/src/http/ngx_http_request.c Tue Feb 11 13:22:44 2020 +0300 +++ b/src/http/ngx_http_request.c Thu Feb 20 16:19:29 2020 +0300 @@ -131,7 +131,7 @@ { ngx_string("Transfer-Encoding"), offsetof(ngx_http_headers_in_t, transfer_encoding), - ngx_http_process_header_line }, + ngx_http_process_unique_header_line }, { ngx_string("TE"), offsetof(ngx_http_headers_in_t, te),