From 68c8deb269ea756c32334143ac67c2c03f21a8d8 Mon Sep 17 00:00:00 2001 From: Sasha Koshka Date: Tue, 10 Dec 2024 00:39:10 -0500 Subject: [PATCH] cmd/stepd: Automatically forbid the configuration file --- cmd/stepd/main.go | 1 + 1 file changed, 1 insertion(+) diff --git a/cmd/stepd/main.go b/cmd/stepd/main.go index 3e81663..2644f3c 100644 --- a/cmd/stepd/main.go +++ b/cmd/stepd/main.go @@ -116,6 +116,7 @@ func main () { StepExt: ucontainer.NewSet(slices.Clone(config["http.step-extension"])...), Index: slices.Clone(config["http.index-file"]), ErrorDocument: config.Get("http.error-document"), + DenyAll: ucontainer.NewSet(configFileName), } if len(handler.StepExt) == 0 { handler.StepExt.Add(".step")