4 ms·

I'm not seeing anything about this in nginx changelogs (or matching CVE's) either. Disabling http2 for now.

by slivanes 5y ago

yxhuvud 5y ago
Why would an Apache bug show up in Nginx changelogs?
- masklinn 5y ago
  It would not, but given how widespread this issue is it seems likely nginx is vulnerable, and sensible to assume it is unless otherwise demonstrated. It’s not like the feature is super useful in general.