add vendor folder to deny list

Author: aptalca

README.md

@@ -222,6 +222,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **15.04.21:** - Add `vendor` folder to deny list.
 * **21.02.21:** - Store search index outside of container, set absolute (default) path for `savedir`.
 * **23.01.21:** - Rebasing to alpine 3.13.
 * **28.09.20:** - Add php7-pdo_sqlite and php7-sqlite3.

readme-vars.yml

@@ -40,6 +40,7 @@ app_setup_block: |
   Upon first install go to `http://$IP:$PORT/install.php` once you have completed the setup, restart the container, login as admin and set "Use nice URLs" in the `admin/Configuration Settings` panel to `.htaccess` and tick `Use slash as namespace separator in URLs` to enable [nice URLs](https://www.dokuwiki.org/rewrite) you will find the webui at `http://$IP:$PORT/`, for more info see [{{ project_name|capitalize }}]({{ project_url }})
 # changelog
 changelogs:
+  - { date: "15.04.21:", desc: "Add `vendor` folder to deny list." }
   - { date: "21.02.21:", desc: "Store search index outside of container, set absolute (default) path for `savedir`." }
   - { date: "23.01.21:", desc: "Rebasing to alpine 3.13." }
   - { date: "28.09.20:", desc: "Add php7-pdo_sqlite and php7-sqlite3." }

root/defaults/default

@@ -15,8 +15,7 @@ server {
     root /app/dokuwiki;
     index doku.php;
 
-    #Remember to comment the below out when you're installing, and uncomment it when done.
-    #location ~ /(conf/|bin/|inc/|install.php) { deny all; }
+    location ~ /(conf/|bin/|inc/|vendor/) { deny all; }
 
     #Support for X-Accel-Redirect
     location ~ ^/data/ { internal ; }

root/etc/cont-init.d/50-config

@@ -77,6 +77,9 @@ else
     echo "Go to http://IP-ADDRESS:PORT/install.php to configure your install then restart your container when finished to remove install.php"
 fi
 
+## Backwards compatibility 2021/04/15
+sed -i 's%location ~ /(conf/|bin/|inc/|install.php) { deny all; }%location ~ /(conf/|bin/|inc/|vendor/) { deny all; }%' /config/nginx/site-confs/default
+
 # permissions
 echo "[cont-init.d] Setting permissions this may take some time"
 chown -R abc:abc \