holm/egroupware
1
1
Fork 0
forked from extern/egroupware
Code Issues Pull Requests Packages Projects Releases Wiki Activity

* Docker: do not allow to call php files ment to be included only (src, setup, inc or vendor directories)

Browse Source
This commit is contained in:
Ralf Becker 2019-10-30 13:33:55 +01:00
parent 6d00d548a8
commit 497ea5f000
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/docker/nginx.conf
View File

@ -35,6 +35,10 @@ server {
alias /usr/share/egroupware/;
try_files $uri $uri/ =404;
location ~ ^/egroupware(/(?U).+\.php) {
# do not allow to call files ment to be included only
location ~ /(src|setup|inc|vendor)/ {
return 403;
}
alias /usr/share/egroupware;
fastcgi_pass fpm;
# added to support WebDAV/CalDAV/CardDAV