mirror of
https://github.com/nextcloud/docker.git
synced 2025-03-15 19:05:09 +01:00
add proxy_cookie_path
The __Host prefix mitigates cookie injection vulnerabilities within potential third-party software sharing the same second level domain. This is one of the metrics used in the Nextcloud security scan. The Dockerfile COPY filename was changed from uploadsize.conf to make it more generic in use. Signed-off-by: danchal <danchal@users.noreply.github.com>
This commit is contained in:
parent
250802c706
commit
abd12b7d7b
21 changed files with 21 additions and 14 deletions
|
@ -1,3 +1,3 @@
|
||||||
FROM jwilder/nginx-proxy:alpine
|
FROM jwilder/nginx-proxy:alpine
|
||||||
|
|
||||||
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf
|
COPY custom.conf /etc/nginx/conf.d/custom.conf
|
||||||
|
|
|
@ -0,0 +1,2 @@
|
||||||
|
client_max_body_size 10G;
|
||||||
|
proxy_cookie_path / "/; HTTPOnly; Secure";
|
|
@ -1 +0,0 @@
|
||||||
client_max_body_size 10G;
|
|
|
@ -1,3 +1,3 @@
|
||||||
FROM jwilder/nginx-proxy:alpine
|
FROM jwilder/nginx-proxy:alpine
|
||||||
|
|
||||||
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf
|
COPY custom.conf /etc/nginx/conf.d/custom.conf
|
||||||
|
|
|
@ -0,0 +1,2 @@
|
||||||
|
client_max_body_size 10G;
|
||||||
|
proxy_cookie_path / "/; HTTPOnly; Secure";
|
|
@ -1 +0,0 @@
|
||||||
client_max_body_size 10G;
|
|
|
@ -1,3 +1,3 @@
|
||||||
FROM jwilder/nginx-proxy:alpine
|
FROM jwilder/nginx-proxy:alpine
|
||||||
|
|
||||||
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf
|
COPY custom.conf /etc/nginx/conf.d/custom.conf
|
||||||
|
|
|
@ -0,0 +1,2 @@
|
||||||
|
client_max_body_size 10G;
|
||||||
|
proxy_cookie_path / "/; HTTPOnly; Secure";
|
|
@ -1 +0,0 @@
|
||||||
client_max_body_size 10G;
|
|
|
@ -1,3 +1,3 @@
|
||||||
FROM jwilder/nginx-proxy:alpine
|
FROM jwilder/nginx-proxy:alpine
|
||||||
|
|
||||||
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf
|
COPY custom.conf /etc/nginx/conf.d/custom.conf
|
||||||
|
|
|
@ -0,0 +1,2 @@
|
||||||
|
client_max_body_size 10G;
|
||||||
|
proxy_cookie_path / "/; HTTPOnly; Secure";
|
|
@ -1 +0,0 @@
|
||||||
client_max_body_size 10G;
|
|
|
@ -1,3 +1,3 @@
|
||||||
FROM jwilder/nginx-proxy:alpine
|
FROM jwilder/nginx-proxy:alpine
|
||||||
|
|
||||||
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf
|
COPY custom.conf /etc/nginx/conf.d/custom.conf
|
||||||
|
|
|
@ -0,0 +1,2 @@
|
||||||
|
client_max_body_size 10G;
|
||||||
|
proxy_cookie_path / "/; HTTPOnly; Secure";
|
|
@ -1 +0,0 @@
|
||||||
client_max_body_size 10G;
|
|
|
@ -1,3 +1,3 @@
|
||||||
FROM jwilder/nginx-proxy:alpine
|
FROM jwilder/nginx-proxy:alpine
|
||||||
|
|
||||||
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf
|
COPY custom.conf /etc/nginx/conf.d/custom.conf
|
||||||
|
|
|
@ -0,0 +1,2 @@
|
||||||
|
client_max_body_size 10G;
|
||||||
|
proxy_cookie_path / "/; HTTPOnly; Secure";
|
|
@ -1 +0,0 @@
|
||||||
client_max_body_size 10G;
|
|
|
@ -1,3 +1,3 @@
|
||||||
FROM jwilder/nginx-proxy:alpine
|
FROM jwilder/nginx-proxy:alpine
|
||||||
|
|
||||||
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf
|
COPY custom.conf /etc/nginx/conf.d/custom.conf
|
||||||
|
|
|
@ -0,0 +1,2 @@
|
||||||
|
client_max_body_size 10G;
|
||||||
|
proxy_cookie_path / "/; HTTPOnly; Secure";
|
|
@ -1 +0,0 @@
|
||||||
client_max_body_size 10G;
|
|
Loading…
Add table
Reference in a new issue