2 ms·
Using nginx in front of my local confluence server (not listening on the internet) and used the following: location ~\* \$\{. { deny all; } but
by Icingdeath 4y ago
Using nginx in front of my local confluence server (not listening on the internet) and used the following:
location ~\* \$\{. {
deny all;
}
but this only helps if this vulnerability is triggered using the request uri otherwise it's useless
- bombcar 4y agoAnyone know how you'd quote it for Apache rewrite? RewriteEngine On RewriteCond %{REQUEST_URI} ^.*\${.*$ RewriteRule ^/(.*) https://google.com [R=302,L] seems to work ...