commit 169701c94e30c00e5bfcf9ffa7b2d8f3002f415e
author Michael Brooks <michaelbrooks@google.com> Tue Aug 22 11:05:22 2023 -0700
committer Michael Brooks <michaelbrooks@google.com> Tue Aug 22 11:06:13 2023 -0700
tree 884972516c42ae1b4df6247efe6fb1b09062c81f
parent b82284934d0edbeefd55bdcca5f3a63f243496a0

Add ending slashes to location directive

Fixes b/296866680, a potential security risk.

Change-Id: I62866ba0ad55a4d88fbb0df6e97a2a961b4b1cb4

k8s/nginx-apt.yaml

diff --git a/k8s/nginx-apt.yaml b/k8s/nginx-apt.yaml
index b6b6ffe..5fcb659 100644
--- a/k8s/nginx-apt.yaml
+++ b/k8s/nginx-apt.yaml
@@ -9,12 +9,12 @@
       listen 80;
       server_name mendel-linux.org;
 
-      location /apt {
+      location /apt/ {
         autoindex on;
         alias /usr/share/nginx/html/publishes;
       }
 
-      location /images {
+      location /images/ {
         autoindex on;
         alias /usr/share/nginx/html/images;
       }