1
0
mirror of https://github.com/ohmyzsh/ohmyzsh.git synced 2024-11-22 06:04:38 +08:00

chore(installer): only serve installer in / and /install.sh

This avoids false positive detections on other bruteforced paths,
such as .zsh_history or others, which eventually result in
automated false vulnerability submissions.
This commit is contained in:
Marc Cornellà 2024-10-18 14:27:54 +02:00
parent 067558da92
commit 4ada154190
No known key found for this signature in database
GPG Key ID: 0314585E776A9C1B

View File

@ -1,7 +1,7 @@
{ {
"headers": [ "headers": [
{ {
"source": "/((?!favicon.ico).*)", "source": "/(|install.sh)",
"headers": [ "headers": [
{ {
"key": "Content-Type", "key": "Content-Type",
@ -16,7 +16,7 @@
], ],
"rewrites": [ "rewrites": [
{ {
"source": "/((?!favicon.ico|install.sh).*)", "source": "/",
"destination": "/install.sh" "destination": "/install.sh"
} }
] ]