IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

SECURITY: prevent direct download of backups

Browse Source
This commit is contained in:
Régis Hanol 2014-12-03 12:47:28 +01:00
parent 8ab32396a7
commit acc62f2ec2
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
config/nginx.sample.conf
View File

@ -59,6 +59,11 @@ server {
# use dates, it solves the problem fine even cross server
etag off;
# prevent direct download of backups
location ^~ /backups/ {
internal;
}
location / {
root $public;
add_header ETag "";