Merge branch '1.10'

ezecosystem · Jul 26, 2017 · 97ac059 · 97ac059
2 parents 07aa3b5 + 293580e
commit 97ac059
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/doc/apache2/vhost.template b/doc/apache2/vhost.template
@@ -102,6 +102,9 @@
         RewriteCond %{ENV:SYMFONY_ENV} !^(dev)
         RewriteRule ^/(css|js|fonts?)/.*\.(css|js|otf|eot|ttf|svg|woff) - [L]
 
+        # Prevent access to website with direct usage of app.php in URL
+        RewriteRule ^/(.+/)?app\.php - [R=404,L]
+
         RewriteRule .* /app.php
     </IfModule>
 

diff --git a/doc/nginx/ez_params.d/ez_rewrite_params b/doc/nginx/ez_params.d/ez_rewrite_params
@@ -17,5 +17,10 @@ rewrite "^/w3c/p3p\.xml" "/w3c/p3p.xml" break;
 rewrite "^/bundles/(.*)" "/bundles/$1" break;
 rewrite "^/assets/(.*)" "/assets/$1" break;
 
+# Prevent access to website with direct usage of app.php in URL
+if ($request_uri ~ "^/(.+/)?app\.php") {
+    return 404;
+}
+
 rewrite "^(.*)$" "/app.php$1" last;