Skip to content

Commit

Permalink
Better enforcing of mime type for uploads
Browse files Browse the repository at this point in the history
  • Loading branch information
atodorov committed Jun 27, 2023
1 parent 4b8a051 commit ffb0045
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion etc/nginx.conf
Original file line number Diff line number Diff line change
Expand Up @@ -84,7 +84,8 @@ http {

location /uploads/ {
# prevent browser from possibly interpreting untrusted files
add_header Content-Type "text/plain";
types { }
default_type text/plain;

alias /Kiwi/uploads/;
}
Expand Down

0 comments on commit ffb0045

Please sign in to comment.