Commit e7fe5d4d authored by bgm's avatar bgm Committed by memtkmcc

Issue #2811377 by bgm: CiviCRM and Nginx: block access to the 'custom' directory

parent 327ab896
......@@ -475,7 +475,7 @@ location ~* /(?:modules|themes|libraries)/.*\.(?:txt|md)$ {
###
### Deny listed requests for security reasons.
###
location ~* ^/sites/.*/files/civicrm/(?:ConfigAndLog|upload|templates_c) {
location ~* ^/sites/.*/files/civicrm/(?:ConfigAndLog|custom|upload|templates_c) {
access_log off;
return 404;
}
......
......@@ -459,7 +459,7 @@ location ^~ /<?php print $subdir; ?> {
###
### Deny listed requests for security reasons.
###
location ~* /files/civicrm/(?:ConfigAndLog|upload|templates_c) {
location ~* /files/civicrm/(?:ConfigAndLog|custom|upload|templates_c) {
access_log off;
return 404;
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment