Nginx shouldn't serve user.ini files by default.

Azure / wordpress-linux-appservice

MIT License

111 stars 71 forks source link

Nginx shouldn't serve user.ini files by default. #182

Open samrueby opened 1 month ago

samrueby commented 1 month ago

Nginx in the container should be reconfigured not to serve .user.ini files. At the moment, if you have a .user.ini file in your wwwroot, you are able to download it. This can cause security concerns.