Disabling any request body processing with #Vinyl_Cache to avoid the #php RCE is simple:
sub vcl_recv {
if (req.http.Content-Length || req.http.Transfer-Encoding) {
return (synth(403, "No req body"));
}
}
#vinyl_cache — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #vinyl_cache, aggregated by home.social.