From 19697e1acca772ca1ae94befa7125fa2f628ab35 Mon Sep 17 00:00:00 2001 From: Ulf Gebhardt Date: Thu, 6 Jan 2022 08:03:16 +0100 Subject: [PATCH] more escaping --- deployment/bare_metal/nginx/common/protect.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deployment/bare_metal/nginx/common/protect.conf b/deployment/bare_metal/nginx/common/protect.conf index 334aec28f..6ad33bd8e 100644 --- a/deployment/bare_metal/nginx/common/protect.conf +++ b/deployment/bare_metal/nginx/common/protect.conf @@ -40,7 +40,7 @@ location ~* "(https?|ftp|php):/" { location ~* "(=\\\'|=\\%27|/\\\'/?)\." { deny all; } -location ~ "(\{0\}|\(/\(|\.\.\.|\+\+\+|\\\\"\\\\")" { +location ~ "(\{0\}|\(/\(|\.\.\.|\+\+\+|\\\"\\\")" { deny all; } location ~ "(~|`|<|>|:|;|%|\\|\s|\{|\}|\[|\]|\|)" {