vnpower/nginx
1
0
Fork 0
forked from exozyme/nginx
Code Pull requests Activity

Fix path traversal via misconfigured alias

Browse source
This commit is contained in:
Anthony Wang 2021-08-06 10:55:00 -05:00
parent bff7158efa
commit b63589f10c
Signed by untrusted user: a
GPG key ID: BC96B00AEC5F2D76
3 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
exozyme.conf
View file

@ -28,11 +28,11 @@ server {
return 301 https://social.exozy.me$request_uri;
}
location /howtuwu {
location /howtuwu/ {
alias /srv/http/exozy.me/howtuwu/public;
}
location /vncws {
location /vncws/ {
index vnc.html;
alias /usr/share/webapps/novnc/;
try_files $uri $uri/ /vnc.html;

2
ta180m.conf
View file

@ -9,7 +9,7 @@ server {
root /srv/http/ta180m;
index index.html;
location /blog {
location /blog/ {
alias /srv/http/ta180m/blog/_site;
}

2
zabbix.conf
View file

@ -6,7 +6,7 @@ server {
root /srv/http;
index index.php;
location /zabbix {
location /zabbix/ {
if ($scheme ~ ^http:) {
rewrite ^(.*)$ https://$host$1 permanent;
}