fossilfranv/nginx_docker-swag
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: missing chars in authelia server 401

Browse Source
This commit is contained in:
James Elliott 2022-05-10 15:27:10 +10:00
parent 5df55cc0c0
commit b9e0dfb82c
No known key found for this signature in database
GPG Key ID: 0F1C4A096E857E49
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
root/defaults/authelia-server.conf
View File

@ -10,7 +10,7 @@ location ^~ /authelia {
location = /authelia/api/verify {
internal;
if ($request_uri ~ [^a-zA-Z0-9_+-=\!@$%&*?~.:#'\;\(\)\[\]]) {
if ($request_uri ~ [^a-zA-Z0-9_+-=\!@$%&*?~.:#'\;\(\)\[\]])\{\} {
return 401;
}
include /config/nginx/resolver.conf;

2
root/etc/cont-init.d/50-config
View File

@ -109,7 +109,7 @@ fi
# patch authelia-server.conf for CVE-2021-32637
if ! grep -q 'if ($request_uri ~' /config/nginx/authelia-server.conf; then
sed -i '/internal;/a \ \ \ \ if ($request_uri ~ [^a-zA-Z0-9_+-=\\!@$%&*?~.:#'\''\\;\\(\\)\\[\\]]) { return 401; }' /config/nginx/authelia-server.conf
sed -i '/internal;/a \ \ \ \ if ($request_uri ~ [^a-zA-Z0-9_+-=\\!@$%&*?~.:#'\''\\;\\(\\)\\[\\]])\\{\\} { return 401; }' /config/nginx/authelia-server.conf
fi
# copy pre-generated dhparams or generate if needed