Azure / Azure/wordpress-linux-appservice
Nginx shouldn't serve user.ini files by default.
Open
- Dominant language
- HCL
- Stars
- 138
- Forks
- 84
- PR merge metrics
- No merged PRs in 30d
Description
Nginx in the container should be reconfigured not to serve .user.ini files. At the moment, if you have a .user.ini file in your wwwroot, you are able to download it. This can cause security concerns.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.