3 ms·
> A bug in an NGINX module used by Cloudflare’s edge proxies More precise: a bug in a proprietary closed source module for NGINX used in-house at Cloudflare.
by _pmf_ 10y ago
> A bug in an NGINX module used by Cloudflare’s edge proxies
More precise: a bug in a proprietary closed source module for NGINX used in-house at Cloudflare.
- nailer 10y agoNot sure why the parent post is being downmodded: it's entirely accurate. From what Google wrote [1], the module is part of a CloudFlare ScrapeShield, which is a proprietary nginx module that does DOM manipulation to obfuscate pages to fight scrapers. Mismatched tags were causing arbitrary bits of memory to leak into responses. [1] https://bugs.chromium.org/p/project-zero/issues/detail?id=1139 https://bugs.chromium.org/p/project-zero/issues/detail?id=11...
- NTripleOne 10y agobecause it's a snarky "DAE h8 closed sauce proprietary??????" comment.
- nailer 10y agoI thought it was more a "the article accidentally makes it sound like it's code written by nginx rather than CloudFlare" which is a legitimate point.