svrjs/svrjs-nextjs-website
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: svrjs:1b8d8705f4eb707f44ac5f7c815603819e1bc4b3
Branches Tags
svrjs:main
svrjs:proxy
..
compare: svrjs:1a4fb6246b21c1d9fc16dfcc0aeeba885aa8713b
Branches Tags
svrjs:main
svrjs:proxy

2 commits
1b8d8705f4 ... 1a4fb6246b

Author SHA1 Message Date
Dorian Niemiec
1a4fb6246b docs: update the non-standard code configuration to forbid access to .env and .git
Some checks failed
Deploy Next.js application / deploy (push) Has been cancelled
Details
2024-09-10 19:43:13 +02:00
Dorian Niemiec
b7e2ec9d63 docs: fix invalid JSON on example easywaf-config.json file 2024-09-10 19:37:39 +02:00
1 changed files with 2 additions and 2 deletions
Show stats Expand all files Collapse all files

4
pages/docs/mod-notes.md
View file

@ -57,7 +57,7 @@ If you're using SVR.JS behind a reverse proxy, you need to configure _trustProxy
Example _easywaf-config.json_ file: Example _easywaf-config.json_ file:
```json ```json
{ {
"modules" : { "modules": {
"xss": { "xss": {
"excludePaths": "/^\\/(?:git\\/)?(?:(?!\\.git).)*\\.git\\/|^\\/(?:(?:navbar-)?logo|powered).png$/" "excludePaths": "/^\\/(?:git\\/)?(?:(?!\\.git).)*\\.git\\/|^\\/(?:(?:navbar-)?logo|powered).png$/"
}, },
@ -109,7 +109,7 @@ It's also recommended to forbid the access to ".env" file and ".git" directories
"nonStandardCodes": [ "nonStandardCodes": [
{ {
"scode": 403, "scode": 403,
"regex": "/^\\/\\.env(?:\\.local)?(?:$|[#?])/" "regex": "/^\\/\\.env(?:\\.local|\\.production)?(?:$|[#?])/"
}, },
{ {
"scode": 403, "scode": 403,