From 5d3ed12e20435212ccbd676571a4a83909c709fd Mon Sep 17 00:00:00 2001 From: Ingo Schommer Date: Fri, 15 Feb 2013 19:21:35 +0100 Subject: [PATCH] Nginx docs for denying composer file access (fixes #8011) --- docs/en/installation/nginx.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/en/installation/nginx.md b/docs/en/installation/nginx.md index c7ba04a50..f10f80739 100644 --- a/docs/en/installation/nginx.md +++ b/docs/en/installation/nginx.md @@ -62,6 +62,11 @@ Here is the include file `htaccess`: location ~ ^/silverstripe-cache { deny all; } + + # Deny access to composer + location ~ ^/(vendor|composer.json|composer.lock) { + deny all; + } # Don't execute scripts in the assets location ^~ /assets/ {