2 ms·
Default for root is 'html' according to the docs (which is a relative path wrt /usr/share/nginx), not /etc/nginx. http://nginx.org/en/docs/http/ngx_http_core_mo
by megous 6y ago
Default for root is 'html' according to the docs (which is a relative path wrt /usr/share/nginx), not /etc/nginx. http://nginx.org/en/docs/http/ngx_http_core_module.html#root http://nginx.org/en/docs/http/ngx_http_core_module.html#root
I guess it may depend on how nginx was configured during build. But for example on Debian this is not an issue.
- tylermenezes 6y agoI was confused about this one because their own study did not show a single person with /etc/nginx, and only a small handful with any vulnerable path.