github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-22 12:12:26 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: prevent direct download of backups

Browse Source
This commit is contained in:
Régis Hanol 2014-12-03 12:47:28 +01:00
parent 8ab32396a7
commit acc62f2ec2
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
config/nginx.sample.conf
View File

@ -58,6 +58,11 @@ server {
# further more etags are based on the file in nginx not sha of data
# use dates, it solves the problem fine even cross server
etag off;
# prevent direct download of backups
location ^~ /backups/ {
internal;
}
location / {
root $public;