From 0c1dc5537405e819ed324c26b56300697b9c9e7b Mon Sep 17 00:00:00 2001 From: Alexandre Aubin Date: Sun, 25 Oct 2020 11:10:10 +0100 Subject: [PATCH] Update nginx.conf to protect against path traversal issue --- conf/nginx.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index f9066917..7df7ea7f 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -1,5 +1,5 @@ - location __PATH__ - { +#sub_path_only rewrite ^__PATH__$ __PATH__/ permanent; +location __PATH__/ { alias __FINALPATH__/; # Force https if ($scheme = http)