From 89399f6ab763622dedaf5255c21952d2dfabf81f Mon Sep 17 00:00:00 2001 From: Alexandre Aubin Date: Sun, 25 Oct 2020 11:13:54 +0100 Subject: [PATCH] Update nginx.conf to protect against path traversal issue --- conf/nginx.conf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 32a8839..6af30cd 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -1,4 +1,5 @@ -location /Microsoft-Server-ActiveSync { +#sub_path_only rewrite ^Microsoft-Server-ActiveSync$ Microsoft-Server-ActiveSync/ permanent; +location /Microsoft-Server-ActiveSync/ { # Path to source alias __FINALPATH__/ ;