freescout-help-desk / freescout

FreeScout — Free self-hosted help desk & shared mailbox (Zendesk / Help Scout alternative)
https://freescout.net
GNU Affero General Public License v3.0
3.06k stars 503 forks source link

Improve uploads folder security #3428

Closed freescout-helpdesk closed 1 year ago

freescout-helpdesk commented 1 year ago

In order to improve uploads folder security:

freescout-helpdesk commented 1 year ago

FYI @tiredofit @nebulade

freescout-helpdesk commented 1 year ago

Also everyone please notice that filename=$1 changed to filename=$2 in the nginx config above.

@tiredofit @nebulade

nebulade commented 1 year ago

Thanks for letting us know, we use apache in the package, so we added the headers module now.

Lars- commented 1 year ago

Nice, all attachments return a 404 now... Edit: cache seemed to be the problem

rosinghal commented 1 year ago

I am using https://openlitespeed.org/, would you be able to recommend on how to get it to work?