Skip to content
Snippets Groups Projects
Verified Commit 89c5e1af authored by Kristian Klausen's avatar Kristian Klausen :tada:
Browse files

mailman3: Add missing trailing slash for the /static/ path

The code isn't vulnerable to nginx alias traversal[1][2], nevertheless
it should only match /static/ and not e.g. /staticfoobar.

[1] d94f18a7 ("Fix nginx alias traversal")
[2] https://github.com/yandex/gixy/blob/641060d6355fbb5bd71695928a2bf14a9bcb8bf2/docs/en/plugins/aliastraversal.md

Fixes: 9294828f ("Setup mailman3 server")
parent c9df10e4
No related branches found
No related tags found
No related merge requests found
Pipeline #29984 passed
......@@ -10,8 +10,8 @@ server {
access_log /var/log/nginx/{{ lists_domain }}/access.log.json json_main;
error_log /var/log/nginx/{{ lists_domain }}/error.log;
location /static {
alias /var/lib/mailman-web/static;
location /static/ {
alias /var/lib/mailman-web/static/;
}
# include uwsgi_params
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment