Fixed nginx config for security issue nextcry

This commit is contained in:
Dominique Roux 2019-11-19 15:45:02 +01:00
parent 2cf3f01b3b
commit e8541ce8bd
1 changed files with 2 additions and 1 deletions

View File

@ -56,7 +56,7 @@ server {
#pagespeed off;
location / {
rewrite ^ /index.php$uri;
rewrite ^ /index.php;
}
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
@ -68,6 +68,7 @@ server {
location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\.php(?:$|/) {
fastcgi_split_path_info ^(.+\.php)(/.*)$;
try_files $fastcgi_script_name =404;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;