Skip to content

Commit 079f70d

Browse files
committed
Merge pull request #231 from GromNaN/patch-1
[Apache] Keep slashes encoded for API
2 parents 6ceb35b + 73abde7 commit 079f70d

File tree

4 files changed

+16
-0
lines changed

4 files changed

+16
-0
lines changed

web-server/apache/gitlab-apache2.4.conf

+4
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,10 @@
1010

1111
ProxyPreserveHost On
1212

13+
# Ensure that encoded slashes are not decoded but left in their encoded state.
14+
# http://doc.gitlab.com/ce/api/projects.html#get-single-project
15+
AllowEncodedSlashes NoDecode
16+
1317
<Location />
1418
# New authorization commands for apache 2.4 and up
1519
# http://httpd.apache.org/docs/2.4/upgrading.html#access

web-server/apache/gitlab-ssl-apache2.4.conf

+4
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,10 @@
3636

3737
ProxyPreserveHost On
3838

39+
# Ensure that encoded slashes are not decoded but left in their encoded state.
40+
# http://doc.gitlab.com/ce/api/projects.html#get-single-project
41+
AllowEncodedSlashes NoDecode
42+
3943
<Location />
4044
# New authorization commands for apache 2.4 and up
4145
# http://httpd.apache.org/docs/2.4/upgrading.html#access

web-server/apache/gitlab-ssl.conf

+4
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,10 @@
3232

3333
ProxyPreserveHost On
3434

35+
# Ensure that encoded slashes are not decoded but left in their encoded state.
36+
# http://doc.gitlab.com/ce/api/projects.html#get-single-project
37+
AllowEncodedSlashes NoDecode
38+
3539
<Location />
3640
Order deny,allow
3741
Allow from all

web-server/apache/gitlab.conf

+4
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,10 @@
1010

1111
ProxyPreserveHost On
1212

13+
# Ensure that encoded slashes are not decoded but left in their encoded state.
14+
# http://doc.gitlab.com/ce/api/projects.html#get-single-project
15+
AllowEncodedSlashes NoDecode
16+
1317
<Location />
1418
Order deny,allow
1519
Allow from all

0 commit comments

Comments
 (0)