diff options
author | Mario Vavti <mario@mariovavti.com> | 2019-01-27 18:05:46 +0100 |
---|---|---|
committer | Mario Vavti <mario@mariovavti.com> | 2019-01-27 18:05:46 +0100 |
commit | e262de9b2ddb48d618f45a1b28619b068f76ebac (patch) | |
tree | 30c808bb82dfc25df1cfea5876415565ecbef0c0 | |
parent | 5c2f7a744a544a228b809da5e788795ba89ecb08 (diff) | |
download | volse-hubzilla-e262de9b2ddb48d618f45a1b28619b068f76ebac.tar.gz volse-hubzilla-e262de9b2ddb48d618f45a1b28619b068f76ebac.tar.bz2 volse-hubzilla-e262de9b2ddb48d618f45a1b28619b068f76ebac.zip |
update nginx and lighttpd sample server configs to explicit dissalow access to util
-rw-r--r-- | install/sample-lighttpd.conf | 2 | ||||
-rw-r--r-- | install/sample-nginx.conf | 5 |
2 files changed, 6 insertions, 1 deletions
diff --git a/install/sample-lighttpd.conf b/install/sample-lighttpd.conf index db26c3b64..b65d86645 100644 --- a/install/sample-lighttpd.conf +++ b/install/sample-lighttpd.conf @@ -79,7 +79,7 @@ $HTTP["url"] =~ "\.(out|log|htaccess)$" { url.access-deny = ("") } -$HTTP["url"] =~ "(^|/)\.git|(^|/)store" { +$HTTP["url"] =~ "(^|/)\.git|(^|/)store|(^|/)util" { url.access-deny = ("") } diff --git a/install/sample-nginx.conf b/install/sample-nginx.conf index 839f208ae..6a986d426 100644 --- a/install/sample-nginx.conf +++ b/install/sample-nginx.conf @@ -141,5 +141,10 @@ server { deny all; } +#deny access to util + location ~ /util { + deny all; + } + } |