svrjs/svrjs-nextjs-website
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: svrjs:1b8d8705f4eb707f44ac5f7c815603819e1bc4b3
Branches Tags
svrjs:main
svrjs:proxy
...
compare: svrjs:1a4fb6246b21c1d9fc16dfcc0aeeba885aa8713b
Branches Tags
svrjs:main
svrjs:proxy

2 commits
1b8d8705f4 ... 1a4fb6246b

Author SHA1 Message Date
Dorian Niemiec
1a4fb6246b docs: update the non-standard code configuration to forbid access to .env and .git
Some checks failed
Deploy Next.js application / deploy (push) Has been cancelled
Details
2024-09-10 19:43:13 +02:00
Dorian Niemiec
b7e2ec9d63 docs: fix invalid JSON on example easywaf-config.json file 2024-09-10 19:37:39 +02:00
1 changed files with 2 additions and 2 deletions
Show stats Expand all files Collapse all files

4
pages/docs/mod-notes.md
View file

@ -57,7 +57,7 @@ If you're using SVR.JS behind a reverse proxy, you need to configure _trustProxy
Example _easywaf-config.json_ file:
```json
{
"modules" : {
"modules": {
"xss": {
"excludePaths": "/^\\/(?:git\\/)?(?:(?!\\.git).)*\\.git\\/|^\\/(?:(?:navbar-)?logo|powered).png$/"
},
@ -109,7 +109,7 @@ It's also recommended to forbid the access to ".env" file and ".git" directories
"nonStandardCodes": [
{
"scode": 403,
"regex": "/^\\/\\.env(?:\\.local)?(?:$|[#?])/"
"regex": "/^\\/\\.env(?:\\.local|\\.production)?(?:$|[#?])/"
},
{
"scode": 403,