From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id kK7GGDnYLWT5NgAASxT56A (envelope-from ) for ; Wed, 05 Apr 2023 22:21:13 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id 0HGIFznYLWTArAAAG6o9tA (envelope-from ) for ; Wed, 05 Apr 2023 22:21:13 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 34BAF16194 for ; Wed, 5 Apr 2023 22:21:13 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pk9ct-0007PB-OZ; Wed, 05 Apr 2023 16:21:03 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pk9cs-0007P0-Gn for guix-patches@gnu.org; Wed, 05 Apr 2023 16:21:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pk9cs-00025X-8i for guix-patches@gnu.org; Wed, 05 Apr 2023 16:21:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pk9cs-000834-4m for guix-patches@gnu.org; Wed, 05 Apr 2023 16:21:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#62678] [PATCH] services: nginx: Harden php-location settings. References: In-Reply-To: Resent-From: Jonathan Brielmaier Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 05 Apr 2023 20:21:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 62678 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 62678@debbugs.gnu.org Received: via spool by 62678-submit@debbugs.gnu.org id=B62678.168072600330840 (code B ref 62678); Wed, 05 Apr 2023 20:21:02 +0000 Received: (at 62678) by debbugs.gnu.org; 5 Apr 2023 20:20:03 +0000 Received: from localhost ([127.0.0.1]:52727 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pk9bv-00081K-BT for submit@debbugs.gnu.org; Wed, 05 Apr 2023 16:20:03 -0400 Received: from mout.web.de ([212.227.17.12]:54787) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pk9bt-00080k-EJ for 62678@debbugs.gnu.org; Wed, 05 Apr 2023 16:20:01 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de; s=s29768273; t=1680725995; i=jonathan.brielmaier@web.de; bh=88ulcPNUNlBGXgii26DN2inTJTSjqdVkia6RkI/lRCM=; h=X-UI-Sender-Class:Date:To:Subject:From; b=CpKo6O7VSpf5OQAQoMXpeQohWXlAP25KyAmmSmmzN3ptA9Q4vV5KoGhz0sThD2ezz gNUYflZMTN+dAnnLPZY01joVOiXLSe/84reOprmgiqncBX4T91yGdSAoZjHzGwn8JT xZSw0t8dev8sMiIOjD6gPQ/J1J8sJyLcE4wmVRCI2W+73lAQLk+BrSisc7KFjZ4oY2 q++qiA2itvT7+7nUwKnOkljapcxK/a040vDmGU5iE30YrfyhIyL5d/j5iRmaHSeHGt 4L/LEs5E564pBGbpNBsbtMotn7paxUG4bAnjcRmM9dHv5VX65KB5RMWbmiEbC9U3wM Vs8hjfYhlOECA== X-UI-Sender-Class: 814a7b36-bfc1-4dae-8640-3722d8ec6cd6 Received: from [192.168.178.23] ([77.180.26.3]) by smtp.web.de (mrweb106 [213.165.67.124]) with ESMTPSA (Nemesis) id 1MA4fI-1pZkGn1aVW-00BwCi for <62678@debbugs.gnu.org>; Wed, 05 Apr 2023 22:19:55 +0200 Message-ID: <068a52bd-8597-a449-c452-4c110f645ca0@web.de> Date: Wed, 5 Apr 2023 22:19:55 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.9.0 Content-Language: de-DE From: Jonathan Brielmaier Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K1:BA/rvfZVrg47HYjobtkFcH90XVt6FwGIa3zhjBTFiJ9klEEkv6L t6w5R7uZBCLaGGAge5cjKac5Lv3CeDuPYIc2Nw8wCiMApZs7gxDxOj7cvA2fYc8H9vXE4e/ 6RPt/lEs+B1htTXStlrP2tx9Fd77stXejBexsNU6FnWUD0FnXuGiDLWiIb8YqnQEyP3Mq+Z 2Q3DIkxq8+W1sQtfE8PuQ== UI-OutboundReport: notjunk:1;M01:P0:mkZ3A6S5j7E=;jYqFAmcdxFhuiL9FHtE9OR9yrH9 k7Js/fwe38uiNIpHzb9gOqHKxARkGkx7lU1CmkU2nvUt/m/rHpd8eWf2qesZfigjU6fpnVv9M WDULh76joI1RULnKjfhv+mmuNamhbL1aBzgO70vWTB2mGaJYJQLDvWA4lI1ls/LV/d8mLK5y8 BggwHRjL8SMyykC9Tj/zuAOVjeTXYmrSuVwrtlxsjXVkumMENDGcz0gZWtfa7oK9bQqO2FuNz VsRXQcxWvy1jIn5A5dV/Jfzi2tKn2rUL5H3b1ECcKrXAmAXYRT3Fh1rDI+tftWmnHgMK/C3n8 q36IpY54HXzeXhxY0QzbWfKd2hksLIjiPRLVwSH2Tdq1S0MTr5LRDFLOqbYyq3NawoAQEdBeY JOZz9OrqeCqGuxP1wNDsfBHKa3zx4t/Q9j4pYv/csNDKIQuAZcEyVBoOsdJx8gMMfV2aW95ru FZRqdXJibn69wvLkxDpEmitNDNuJamtLHVO4MnzHYkf2VvRK4qySnaUQFTTj2lZlkFKrzWH7i kOkTOHrcyTvjzsq1w9+tHwRaGBlkrxBzlt4PeUAf4ZHOdKC8KpOSjm9X7cc3OasOQRF1BYdf9 C1ENkQ5jIhjWkxVRpKWlboaKRtbIJ/E+6T8ZYaAD70Jmzxp7vkKGpexi2+xa1Y+Nclc4LodG4 qwolQwxONcxC/7GOKea6ordtU1dAoO66oFhlJaneExURgAlAxUXKSfHs9h9KGhFtVhVn/VAqh QfvmmsZ7CqhQK5m4vclDQ8ZTyRfft6SRe7SjJor0sABc151CnVdJJj8EcwIX1vuq33s2onOUp uLECbHvv1ciHUt38iuQc4OUDQUEx/PYO0oU+RNh6l+OJxO6sfbBg5TLQX+Q8ODg5UebkDjUtB paovvOTI080G8AJJm+MAiZsE4nMZUsd1uUdsmglDq9LefRXzt1xakGtgCBnFnBfJ7VLz/L22I ElIs9A== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN ARC-Seal: i=1; s=key1; d=yhetil.org; t=1680726073; a=rsa-sha256; cv=none; b=DTgo4HCQuQP8BTHezd/HyQk9gXbVoxvHFhGtMa9r6UCA2WExzVPbNbfEMtVlCWvVVl/ccd 69Tyai4JuNYPZZNW97YHUfeoXrPxWynkoY0QLrq8ASggxeUVkFOAI1KCiagsVwOMYUScS5 SA1uRHsdaaZBkJF19IBY5eJ6swLgYoxaVjTC8CxVB6a7mgr3BQNqShi1y+g8zHAEKOxutx UYSV04fVuqB5Ugeq2xBy6I/BoHS8rHXca7T2aqHfQIv61Tr1CX9wbwrIgri9IhXQQm3132 yAwSFNkXj+c1r8t9oV6qfoMLSeRa1lGY5JGJuUtzG9JyYb7QTlkx0+5fPjS2xQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=web.de header.s=s29768273 header.b=CpKo6O7V; dmarc=fail reason="SPF not aligned (relaxed)" header.from=web.de (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1680726073; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=88ulcPNUNlBGXgii26DN2inTJTSjqdVkia6RkI/lRCM=; b=e7IJglmRxTLB3cLoux4nHIg22GITKh0UaqJlRajG+01QmTPVAOzpF6NXwE8hz5+w25Xmrq OmS1Uc81MwY1bfypaHYCo1Cs41XpY5JsShpASJYl1RZTh+GZNThnU55WHuzXhbz/e1cc1M EZEVyO6RJ9ry6kRvXDA/TbnJ1kla2yVXVDHW2VlX8neKINUuwPIc7w6+pbbSOcTpTjvM3z Y2yPcYU3IIDWhHjdN+qAy3H0n/tKlySCEdL3gAHa5caio0BkbIfN016zJ91gWG2iqI78/T sYitfdzTtHzdpecC16yMJznTvbrs5Yb/bo5DqXkGlG0Q0BZjAkzSFAGf87vt+Q== X-Migadu-Spam-Score: 5.78 X-Migadu-Scanner: scn1.migadu.com Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=web.de header.s=s29768273 header.b=CpKo6O7V; dmarc=fail reason="SPF not aligned (relaxed)" header.from=web.de (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Spam-Score: 5.78 X-Migadu-Queue-Id: 34BAF16194 X-TUID: uImzUrT7IP3j I wonder if we should at least make the HTTP_PROXY variable configurable. It may need to be set to something else then "" in some scenarios. I don't know...