Home
Phabricator
Search
Log In
Differential
D22573
Diff 62088
docker/nginx-default
Changeset View
Be careful with *.php wildcards with Nginx.
While Identity doesn't allow users to upload files, on sites where it is possible to upload files this provides a trivial vector for Remote Code Execution.