From a54da702af07b3a9b91f1ecf1ad7a5cc74707a45 Mon Sep 17 00:00:00 2001
From: ericgaspar <junk.eg@free.fr>
Date: Sat, 17 Oct 2020 12:31:47 +0200
Subject: [PATCH] Protect data directory

---
 conf/nginx.conf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/conf/nginx.conf b/conf/nginx.conf
index 3af1432..9caee66 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -16,6 +16,11 @@ location __PATH__/ {
 	# Override CSP header to make SSOWAT user panel compatible with kanboard
 	more_set_headers Content-Security-Policy "default-src 'self' 'unsafe-eval' data:;";
 
+	# Deny access to the directory data
+	location __PATH__/data {
+        deny all;
+    }
+
 	location ~ [^/]\.php(/|$) {
 		fastcgi_split_path_info ^(.+?\.php)(/.*)$;
 		fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock;