Nginx shouldn't serve user.ini files by default.
Opened this issue · 0 comments
samrueby commented
Nginx in the container should be reconfigured not to serve .user.ini files. At the moment, if you have a .user.ini file in your wwwroot, you are able to download it. This can cause security concerns.