diff options
| author | Alexandre Flament <alex@al-f.net> | 2021-03-04 11:27:03 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-03-04 11:27:03 +0100 |
| commit | 1d10ae175c0929d383d268f56bfadb304365ccf2 (patch) | |
| tree | 7cee11f8cae196a2764d319f0736cba1877abb4e /utils | |
| parent | 6ba37777f732d0538be342511e68494d75e3627b (diff) | |
| parent | 8736f5bd70dea715717c641df25870c40d4a42b9 (diff) | |
| download | searxng-1d10ae175c0929d383d268f56bfadb304365ccf2.tar.gz searxng-1d10ae175c0929d383d268f56bfadb304365ccf2.zip | |
Merge pull request #2618 from thezeroalpha/master
Fix security vulnerabilities in provided nginx configuration
Diffstat (limited to 'utils')
| -rw-r--r-- | utils/templates/etc/nginx/default.apps-available/morty.conf | 2 | ||||
| -rw-r--r-- | utils/templates/etc/nginx/default.apps-available/searx.conf:filtron | 6 |
2 files changed, 4 insertions, 4 deletions
diff --git a/utils/templates/etc/nginx/default.apps-available/morty.conf b/utils/templates/etc/nginx/default.apps-available/morty.conf index e7ffa27e2..51f083985 100644 --- a/utils/templates/etc/nginx/default.apps-available/morty.conf +++ b/utils/templates/etc/nginx/default.apps-available/morty.conf @@ -3,7 +3,7 @@ location /morty { proxy_pass http://127.0.0.1:3000/; - proxy_set_header Host \$http_host; + proxy_set_header Host \$host; proxy_set_header Connection \$http_connection; proxy_set_header X-Real-IP \$remote_addr; proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; diff --git a/utils/templates/etc/nginx/default.apps-available/searx.conf:filtron b/utils/templates/etc/nginx/default.apps-available/searx.conf:filtron index d3137e42d..a89aa38b3 100644 --- a/utils/templates/etc/nginx/default.apps-available/searx.conf:filtron +++ b/utils/templates/etc/nginx/default.apps-available/searx.conf:filtron @@ -3,7 +3,7 @@ location ${SEARX_URL_PATH} { proxy_pass http://127.0.0.1:4004/; - proxy_set_header Host \$http_host; + proxy_set_header Host \$host; proxy_set_header Connection \$http_connection; proxy_set_header X-Real-IP \$remote_addr; proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; @@ -11,6 +11,6 @@ location ${SEARX_URL_PATH} { proxy_set_header X-Script-Name ${SEARX_URL_PATH}; } -location ${SEARX_URL_PATH}/static { - alias ${SEARX_SRC}/searx/static; +location ${SEARX_URL_PATH}/static/ { + alias ${SEARX_SRC}/searx/static/; } |