commit 175ea6d039461061e663e371041d1cdbbb03d7b5
author Jeff Kaufman <jefftk@google.com> Wed Jul 22 10:32:41 2015 -0400
committer Jeff Kaufman <jefftk@google.com> Wed Jul 22 10:35:42 2015 -0400
tree 1995c4324fb750cc742fd93c49bed3f7c9d22873
parent a7bef40eac715f2d0adf06436b926524ba2bbf81

config: whitelist a few more directives for script variables

When configuring downstream caching if you have an origin with multiple caches in front of it you might want to choose how you handle requests in response to which cache you're getting them from.  Whitelist DownstreamCachePurgeLocationPrefix, DownstreamCachePurgeMethod, and DownstreamCacheRewrittenPercentageThreshold for scripting so this is possible.

src/ngx_rewrite_options.cc

diff --git a/src/ngx_rewrite_options.cc b/src/ngx_rewrite_options.cc
index 40d1bd1..c28f099 100644
--- a/src/ngx_rewrite_options.cc
+++ b/src/ngx_rewrite_options.cc
@@ -276,10 +276,15 @@
 
   ScriptLine* script_line;
   script_line = NULL;
-  // Only allow script variable support for LoadFromFile for now.
   // Note that LoadFromFile should not be scriptable on wildcard hosts,
   // as browsers might be able to manipulate its natural use-case: $http_host.
-  if (!StringCaseStartsWith(directive, "LoadFromFile")) {
+  if (!StringCaseStartsWith(directive, "LoadFromFile") &&
+      !StringCaseEqual(directive, "EnableFilters") &&
+      !StringCaseEqual(directive, "DisableFilters") &&
+      !StringCaseEqual(directive, "DownstreamCachePurgeLocationPrefix") &&
+      !StringCaseEqual(directive, "DownstreamCachePurgeMethod") &&
+      !StringCaseEqual(directive,
+                       "DownstreamCacheRewrittenPercentageThreshold")) {
     compile_scripts = false;
   }