YunoHost/yunohost
1
0
Fork 0
mirror of https://github.com/YunoHost/yunohost.git synced 2024-09-03 20:06:10 +02:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #420 from YunoHost/fix-1034-nginx-traversal

Browse source 
Fix 1037 nginx traversal
This commit is contained in:
Laurent Peuch 2018-02-07 21:39:18 +01:00 • committed by GitHub
commit 971a2b06b5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
data/templates/nginx/plain/yunohost_admin.conf.inc
View file

@ -1,4 +1,7 @@
location /yunohost/admin { # Avoid the nginx path/alias traversal weakness ( #1037 )
rewrite ^/yunohost/admin$ /yunohost/admin/ permanent;
location /yunohost/admin/ {
alias /usr/share/yunohost/admin/; alias /usr/share/yunohost/admin/;
default_type text/html; default_type text/html;
index index.html; index index.html;