From e729f386c4e13dce80b55dda5e4a71c23ba98863 Mon Sep 17 00:00:00 2001
From: nd <git@notandy.de>
Date: Fri, 25 Oct 2019 10:51:48 +0200
Subject: [PATCH] fixed nginx config because of a security issue

---
 templates/nginx.j2 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/templates/nginx.j2 b/templates/nginx.j2
index fd5c27a..3b78602 100644
--- a/templates/nginx.j2
+++ b/templates/nginx.j2
@@ -26,7 +26,7 @@ server {
 	}
 
 	location / {
-		rewrite ^ /index.php$request_uri;
+		rewrite ^ /index.php;
 	}
 
 	location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
@@ -38,6 +38,7 @@ server {
 
 	location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+)\.php(?:$|/) {
 		fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+		try_files $fastcgi_script_name =404;
 		include fastcgi_params;
 		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 		fastcgi_param PATH_INFO $fastcgi_path_info;