匹配并使用nginx从URI路径重定向“http：//”（双斜杠）

Question

I want nginx return ' http://example.com ' with request url ' http://mydomain/url=http://example.com ' use conf blow, but it give me 'http:/xxx.com'.

what's wrong, can someone give some help! thanks.

this is my nginx conf

location ~ url=(.*)$ {
    return 301 $1;
}

Answer 1

In addition to the suggestion of Alexey Ten to use http://nginx.org/r/merge_slashes , which indeed may cause security issues, you can also use the following, which is probably a better approach anyways (if you are aleady set at the URL structure, that is):

location /url= {
    if ($request_uri ~ ^/url=(.*)$) {
        return 301 $1;
    }
    return 403;
}

Another option would be:

location /url=http:/ {
    rewrite ^/url=http:/(.*)$   http://$1;
}

BTW, I would avoid using regular expressions in top-level locations, as it's generally less efficient than using the approaches above, but you can basically do the same thing with your approach as well.

Note, however, that in any case, unconditionally redirecting users to a user-supplied string may itself make your site vulnerable to certain attacks.