From 595f0163fd13f8d9e7ff1d32e85838f665f7797a Mon Sep 17 00:00:00 2001 From: Alexandre Aubin Date: Sun, 25 Oct 2020 11:11:39 +0100 Subject: [PATCH] Update nginx.conf to protect against path traversal issue --- conf/nginx.conf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 50e6a3c..60b0ab8 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -1,4 +1,5 @@ -location ^~ __PATH__ { +#sub_path_only rewrite ^__PATH__$ __PATH__/ permanent; +location ^~ __PATH__/ { alias __FINALPATH__/public/; try_files $uri $uri/ @snipe; index index.php;