Promote path traversal issue detection to error instead of warning

This commit is contained in:
Alexandre Aubin 2019-03-20 21:08:13 +01:00
parent ccd79ba1cc
commit c47f63c43c

View file

@ -201,7 +201,7 @@ class App():
yield location
for location in find_path_traversal_issue(nginxconf):
print_warning(
print_error(
"The nginx configuration (especially location %s) "
"appears vulnerable to path traversal issues as explained in\n"
" https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/\n"