From 0bbf93073487ead0f45b1209ec2930ad9265b38c Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 7 Jan 2022 00:15:33 +0100 Subject: [PATCH] Fix path traversal issues --- conf/nginx.conf | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index c3161d5..0b1cdf6 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -105,12 +105,12 @@ location /media/ { alias __DATADIR__/media/; } -location /_protected/media { +location /_protected/media/ { # this is an internal location that is used to serve # audio files once correct permission / authentication # has been checked on API side internal; - alias __DATADIR__/media; + alias __DATADIR__/media/; } # Comment the previous location and uncomment this one if you're storing @@ -122,13 +122,13 @@ location /_protected/media { # proxy_pass $1; # } -location /_protected/music { +location /_protected/music/ { # this is an internal location that is used to serve # audio files once correct permission / authentication # has been checked on API side # Set this to the same value as your MUSIC_DIRECTORY_PATH setting internal; - alias __DATADIR__/music; + alias __DATADIR__/music/; } location /staticfiles/ {