merge #776 - some owncloud paths were improperly exposed over http

36d51bbd · Joshua Tauberer · eb8cfaab · c5e8a975 · 36d51bbd
Commit 36d51bbd authored Mar 31, 2016 by Joshua Tauberer
Show whitespace changes
Inline Side-by-side

Showing with 5 additions and 2 deletions

nginx-primaryonly.conf conf/nginx-primaryonly.conf +5 -2

No files found.
--- a/conf/nginx-primaryonly.conf
+++ b/conf/nginx-primaryonly.conf
@@ -18,7 +18,10 @@
 	rewrite ^(/cloud/core/doc/[^\/]+/)$ $1/index.html;
 	location /cloud/ {
 		alias /usr/local/lib/owncloud/;
-		location ~ ^/(data|config|\.ht|db_structure\.xml|README) {
+	 	location ~ ^/cloud/(build|tests|config|lib|3rdparty|templates|data|README)/ {
+	 		deny all;
+	 	}
+	 	location ~ ^/cloud/(?:\.|autotest|occ|issue|indie|db_|console) {
 	 		deny all;
 	 	}
 	}