From 63520c9b26e09f11276312495b9b009d840cc65a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Arkadiusz=20Ry=C5=9B?= Date: Sun, 5 Apr 2020 12:40:54 +0200 Subject: [PATCH] Add trailing slash in nginx configuration to avoid path traversal exploits --- .../compose/production/nginx/default.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/{{cookiecutter.project_slug}}/compose/production/nginx/default.conf b/{{cookiecutter.project_slug}}/compose/production/nginx/default.conf index adb969204..315fde8e3 100644 --- a/{{cookiecutter.project_slug}}/compose/production/nginx/default.conf +++ b/{{cookiecutter.project_slug}}/compose/production/nginx/default.conf @@ -1,7 +1,7 @@ server { listen 80; server_name localhost; - location /media { + location /media/ { autoindex on; alias /usr/share/nginx/media/; }