Package: libnginx-mod-http-subs-filter Version: 1.14.2-2+deb10u1 Severity: normal
When a page is sent with a Content-Encoding header, mod-http-subs-filter as packaged by Debian does not process the content, even if the encoding provided is 'identity' (the use of no transformations whatsoever). This was reported and fixed by indust in April 2016, [1] with the patch merged upstream the next day. [2] However, this is still present in Debian since it is using the code from 2014 (version v0.6.4), which is the last one provided by the project. Ideally, upstream would tag a new release, [3] with Debian updating to that (there were only a few changes in these years, but it would be nice to have the other ones, too). 1- https://github.com/yaoweibin/ngx_http_substitutions_filter_module/pull/20 2- https://github.com/yaoweibin/ngx_http_substitutions_filter_module/commit/bc58cb11844bc42735bbaef7085ea86ace46d05b 3- https://github.com/yaoweibin/ngx_http_substitutions_filter_module/issues/37
