Merge pull request #962 from dacook/block-php-requests

Block requests for .php
openfoodfoundation · Nov 21, 2024 · eec96a8 · eec96a8
2 parents 3a50ff3 + cb4485d
commit eec96a8
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/inventory/group_vars/all.yml b/inventory/group_vars/all.yml
@@ -353,6 +353,12 @@ nginx_sites:
       brotli_types text/css text/javascript text/plain application/javascript application/x-javascript application/json;
 
       try_files $uri/index.html $uri @rails;
+
+      # Block scanning for scripts efficiently.
+      location ~ \.php(\?.*)?$ {
+        return 404;
+      }
+
       location @rails {
         {{ nginx_valid_methods }}