Re: Multipart/form-data proxy pass?

2021-12-14 Thread eboats
I don't see any errors in the logs - the request gets to the backend API ok but am wondering what nginx config params may be involved in handling content_type= multipart/form-data. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,293076,293078#msg-293078

Re: Multipart/form-data proxy pass?

2021-12-14 Thread Sergey A. Osokin
Hi, On Tue, Dec 14, 2021 at 11:09:15PM -0500, eboats wrote: > Hello, > I'm using nginx as a proxy to a backend API that takes a POST payload > of a csv file ( content type = multipart/form-data ). I can see the request > getting to the API but the file is not being passed by nginx. > > What ng

Multipart/form-data proxy pass?

2021-12-14 Thread eboats
Hello, I'm using nginx as a proxy to a backend API that takes a POST payload of a csv file ( content type = multipart/form-data ). I can see the request getting to the API but the file is not being passed by nginx. What nginx config params do I need for nginx to pass the multipart/form-data to

Re: What are NGINX reverse proxy users doing to prevent HTTP Request smuggling?

2021-12-14 Thread Maxim Dounin
Hello! On Tue, Dec 14, 2021 at 02:50:19PM +, Sai Vishnu Soudri (ssoudri) wrote: > Thanks a lot for your reply. Just to clarify, by "There are no > know vulnerabilities in nginx which make request smuggling > possible" you mean after the 1.21.x release right? > I am using OpenResty and the l

Re: What are NGINX reverse proxy users doing to prevent HTTP Request smuggling?

2021-12-14 Thread Sai Vishnu Soudri (ssoudri)
Hi Maxim, Thanks a lot for your reply. Just to clarify, by "There are no know vulnerabilities in nginx which make request smuggling possible" you mean after the 1.21.x release right? I am using OpenResty and the latest version of OpenResty is based on mainline nginx core 1.19.9. Currently, the