Fix slash in nginx vhost files against path traversal (ansible-collec…

…tions#1184) * fix: slash in nginx vhost files against path traversal * Add changelog fragment
pyrodie18 · Apr 14, 2024 · 55cc0f5 · 55cc0f5
1 parent 75f3480
commit 55cc0f5
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/changelogs/fragments/1183-nginx-fix-against-path-traversal.yml b/changelogs/fragments/1183-nginx-fix-against-path-traversal.yml
@@ -0,0 +1,2 @@
+minor_changes:
+  - Add slash at the end of the location directives, to prevent path traversal attacks.
diff --git a/roles/zabbix_web/templates/nginx_vhost.conf.j2 b/roles/zabbix_web/templates/nginx_vhost.conf.j2
@@ -20,7 +20,7 @@ server {
         try_files       $uri $uri/ =404;
     }
 
-    location /assets {
+    location /assets/ {
         access_log      off;
         expires         10d;
     }
@@ -85,7 +85,7 @@ server {
         try_files       $uri $uri/ =404;
     }
 
-    location /assets {
+    location /assets/ {
         access_log      off;
         expires         10d;
     }
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		minor_changes:
		- Add slash at the end of the location directives, to prevent path traversal attacks.