Merge pull request #420 from YunoHost/fix-1034-nginx-traversal

Fix 1037 nginx traversal
This commit is contained in:
Laurent Peuch 2018-02-07 21:39:18 +01:00 committed by GitHub
commit 971a2b06b5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,4 +1,7 @@
location /yunohost/admin {
# Avoid the nginx path/alias traversal weakness ( #1037 )
rewrite ^/yunohost/admin$ /yunohost/admin/ permanent;
location /yunohost/admin/ {
alias /usr/share/yunohost/admin/;
default_type text/html;
index index.html;