aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMario Vavti <mario@mariovavti.com>2019-01-27 18:05:46 +0100
committerMario Vavti <mario@mariovavti.com>2019-01-27 18:05:46 +0100
commite262de9b2ddb48d618f45a1b28619b068f76ebac (patch)
tree30c808bb82dfc25df1cfea5876415565ecbef0c0
parent5c2f7a744a544a228b809da5e788795ba89ecb08 (diff)
downloadvolse-hubzilla-e262de9b2ddb48d618f45a1b28619b068f76ebac.tar.gz
volse-hubzilla-e262de9b2ddb48d618f45a1b28619b068f76ebac.tar.bz2
volse-hubzilla-e262de9b2ddb48d618f45a1b28619b068f76ebac.zip
update nginx and lighttpd sample server configs to explicit dissalow access to util
-rw-r--r--install/sample-lighttpd.conf2
-rw-r--r--install/sample-nginx.conf5
2 files changed, 6 insertions, 1 deletions
diff --git a/install/sample-lighttpd.conf b/install/sample-lighttpd.conf
index db26c3b64..b65d86645 100644
--- a/install/sample-lighttpd.conf
+++ b/install/sample-lighttpd.conf
@@ -79,7 +79,7 @@ $HTTP["url"] =~ "\.(out|log|htaccess)$" {
url.access-deny = ("")
}
-$HTTP["url"] =~ "(^|/)\.git|(^|/)store" {
+$HTTP["url"] =~ "(^|/)\.git|(^|/)store|(^|/)util" {
url.access-deny = ("")
}
diff --git a/install/sample-nginx.conf b/install/sample-nginx.conf
index 839f208ae..6a986d426 100644
--- a/install/sample-nginx.conf
+++ b/install/sample-nginx.conf
@@ -141,5 +141,10 @@ server {
deny all;
}
+#deny access to util
+ location ~ /util {
+ deny all;
+ }
+
}