aszlig 6fe989eaed nixos/tests/acme: Use exact match in TOS location ... Since the switch to check the nginx config with gixy in 59fac1a6d7, the ACME test doesn't build anymore, because gixy reports the following false-positive (reindented): >> Problem: [alias_traversal] Path traversal via misconfigured alias. Severity: MEDIUM Description: Using alias in a prefixed location that doesn't ends with directory separator could lead to path traversal vulnerability. Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md Pseudo config: server { server_name letsencrypt.org; location /documents/2017.11.15-LE-SA-v1.2.pdf { alias /nix/store/y4h5ryvnvxkajkmqxyxsk7qpv7bl3vq7-2017.11.15-LE-SA-v1.2.pdf; } } The reason this is a false-positive is because the destination is not a directory, so something like "/foo.pdf../other.txt" won't work here, because the resulting path would be ".../destfile.pdf../other.txt". Nevertheless it's a good idea to use the exact match operator (=), to not only shut up gixy but also gain a bit of performance in lookup (not that it would matter in our test). Signed-off-by: aszlig <aszlig@nix.build>		2019-04-06 12:51:56 +02:00
..
letsencrypt	nixos/tests/acme: Use exact match in TOS location	2019-04-06 12:51:56 +02:00
webroot	nixos docs: run the formatting tool (no content change)	2019-03-22 14:44:11 +01:00
ec2.nix	nixos/tests/ec2: reuse ssh keys from ssh-keys.nix	2019-02-11 20:58:45 +01:00
resolver.nix	nixos/tests/letsencrypt: Hardcode certs and keys	2018-07-12 02:32:46 +02:00
user-account.nix	[bot] nixos/*: remove unused arguments in lambdas	2018-07-20 20:56:59 +00:00
x11.nix	Move all of NixOS to nixos/ in preparation of the repository merge	2013-10-10 13:28:20 +02:00