Fix alias traversal (#20076)

see https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md

Co-authored-by: 6543 <6543@obermui.de>
This commit is contained in:
Sandro 2022-06-22 10:15:49 +02:00 committed by GitHub
parent 031f5f7b7c
commit e9aa698cf0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -88,8 +88,8 @@ server {
listen 80; listen 80;
server_name git.example.com; server_name git.example.com;
location /_/static/assets { location /_/static/assets/ {
alias /path/to/gitea/public; alias /path/to/gitea/public/;
} }
location / { location / {
@ -120,8 +120,8 @@ server {
listen 80; listen 80;
server_name cdn.example.com; server_name cdn.example.com;
location /gitea { location /gitea/ {
alias /path/to/gitea/public; alias /path/to/gitea/public/;
} }
location / { location / {
@ -362,4 +362,4 @@ gitea:
- "traefik.http.services.gitea-websecure.loadbalancer.server.port=3000" - "traefik.http.services.gitea-websecure.loadbalancer.server.port=3000"
``` ```
This config assumes that you are handling HTTPS on the traefik side and using HTTP between Gitea and traefik. This config assumes that you are handling HTTPS on the traefik side and using HTTP between Gitea and traefik.