0
0
Fork 0
mirror of https://github.com/nextcloud/docker.git synced 2025-03-15 19:05:09 +01:00

add proxy_cookie_path

The __Host prefix mitigates cookie injection vulnerabilities within potential third-party software sharing the same second level domain.
This is one of the metrics used in the Nextcloud security scan.

The Dockerfile COPY filename was changed from uploadsize.conf to make it more generic in use.

Signed-off-by: danchal <danchal@users.noreply.github.com>
This commit is contained in:
danchal 2019-01-31 09:37:21 +01:00
parent 250802c706
commit abd12b7d7b
21 changed files with 21 additions and 14 deletions

View file

@ -1,3 +1,3 @@
FROM jwilder/nginx-proxy:alpine FROM jwilder/nginx-proxy:alpine
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf COPY custom.conf /etc/nginx/conf.d/custom.conf

View file

@ -0,0 +1,2 @@
client_max_body_size 10G;
proxy_cookie_path / "/; HTTPOnly; Secure";

View file

@ -1,3 +1,3 @@
FROM jwilder/nginx-proxy:alpine FROM jwilder/nginx-proxy:alpine
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf COPY custom.conf /etc/nginx/conf.d/custom.conf

View file

@ -0,0 +1,2 @@
client_max_body_size 10G;
proxy_cookie_path / "/; HTTPOnly; Secure";

View file

@ -1,3 +1,3 @@
FROM jwilder/nginx-proxy:alpine FROM jwilder/nginx-proxy:alpine
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf COPY custom.conf /etc/nginx/conf.d/custom.conf

View file

@ -0,0 +1,2 @@
client_max_body_size 10G;
proxy_cookie_path / "/; HTTPOnly; Secure";

View file

@ -1,3 +1,3 @@
FROM jwilder/nginx-proxy:alpine FROM jwilder/nginx-proxy:alpine
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf COPY custom.conf /etc/nginx/conf.d/custom.conf

View file

@ -0,0 +1,2 @@
client_max_body_size 10G;
proxy_cookie_path / "/; HTTPOnly; Secure";

View file

@ -1 +0,0 @@
client_max_body_size 10G;

View file

@ -1,3 +1,3 @@
FROM jwilder/nginx-proxy:alpine FROM jwilder/nginx-proxy:alpine
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf COPY custom.conf /etc/nginx/conf.d/custom.conf

View file

@ -0,0 +1,2 @@
client_max_body_size 10G;
proxy_cookie_path / "/; HTTPOnly; Secure";

View file

@ -1 +0,0 @@
client_max_body_size 10G;

View file

@ -1,3 +1,3 @@
FROM jwilder/nginx-proxy:alpine FROM jwilder/nginx-proxy:alpine
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf COPY custom.conf /etc/nginx/conf.d/custom.conf

View file

@ -0,0 +1,2 @@
client_max_body_size 10G;
proxy_cookie_path / "/; HTTPOnly; Secure";

View file

@ -1 +0,0 @@
client_max_body_size 10G;

View file

@ -1,3 +1,3 @@
FROM jwilder/nginx-proxy:alpine FROM jwilder/nginx-proxy:alpine
COPY uploadsize.conf /etc/nginx/conf.d/uploadsize.conf COPY custom.conf /etc/nginx/conf.d/custom.conf

View file

@ -0,0 +1,2 @@
client_max_body_size 10G;
proxy_cookie_path / "/; HTTPOnly; Secure";

View file

@ -1 +0,0 @@
client_max_body_size 10G;