1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 11:55:40 +01:00

Improve documentation (minor)

* Change comment to better indicate setting in nginx example conf
   which serves the TLP != white locations of the prodiver.
   We do advertise them in the provider-metadata.json, but we still
   want to use 404 to not reveal more about the directory contents.
This commit is contained in:
Bernhard Reiter 2022-06-09 16:18:09 +02:00
parent 776a08578b
commit 8c7e03c882
No known key found for this signature in database
GPG key ID: 2B7BA3BF9BC3A554

View file

@ -33,8 +33,8 @@ echo '
autoindex on;
# in this location access is only allowed with client certs
if ($ssl_client_verify != SUCCESS){
# we use status code 404 == "Not Found", because we do not
# want to reveal if this location exists or not.
# we use status code 404 == "Not Found", because we do
# not want to reveal if files within this location exist or not.
return 404;
}
}