Fix security issue

iam404 · iam404 · commit c64f28eaf5e9 · 2015-10-26T14:05:48.000+05:30
diff --git a/ee/cli/templates/locations.mustache b/ee/cli/templates/locations.mustache
@@ -34,7 +34,7 @@ location ~* ^.+\.(bak|log|old|orig|original|php#|php~|php_bak|save|swo|swp|sql)$
   log_not_found off;
 }
 # Return 403 forbidden for readme.(txt|html) or license.(txt|html) or example.(txt|html)
-if ($request_uri ~* "^.+(readme|license|example)\.(txt|html)$") {
+if ($uri ~* "^.+(readme|license|example)\.(txt|html)$") {
   return 403;
 }
 # Status pages

Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,7 @@ location ~* ^.+\.(bak\|log\|old\|orig\|original\|php#\|php~\|php_bak\|save\|swo\|swp\|sql)$`
`34`	`34`	`log_not_found off;`
`35`	`35`	`}`
`36`	`36`	`# Return 403 forbidden for readme.(txt\|html) or license.(txt\|html) or example.(txt\|html)`
`37`		`-if ($request_uri ~* "^.+(readme\|license\|example)\.(txt\|html)$") {`
	`37`	`+if ($uri ~* "^.+(readme\|license\|example)\.(txt\|html)$") {`
`38`	`38`	`return 403;`
`39`	`39`	`}`
`40`	`40`	`# Status pages`