mirror of
https://github.com/gocsaf/csaf.git
synced 2025-12-22 18:15:42 +01:00
Improve documentation (minor)
* Change comment to better indicate setting in nginx example conf which serves the TLP != white locations of the prodiver. We do advertise them in the provider-metadata.json, but we still want to use 404 to not reveal more about the directory contents.
This commit is contained in:
parent
776a08578b
commit
8c7e03c882
1 changed files with 2 additions and 2 deletions
|
|
@ -33,8 +33,8 @@ echo '
|
||||||
autoindex on;
|
autoindex on;
|
||||||
# in this location access is only allowed with client certs
|
# in this location access is only allowed with client certs
|
||||||
if ($ssl_client_verify != SUCCESS){
|
if ($ssl_client_verify != SUCCESS){
|
||||||
# we use status code 404 == "Not Found", because we do not
|
# we use status code 404 == "Not Found", because we do
|
||||||
# want to reveal if this location exists or not.
|
# not want to reveal if files within this location exist or not.
|
||||||
return 404;
|
return 404;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue