Merge pull request #1075 from Log1x/patch-1

Prevent direct access for .blade.php files
roots · Apr 30, 2019 · 9c50dbc · 9c50dbc
2 parents 0193cfa + 978d46f
commit 9c50dbc
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/roles/wordpress-setup/templates/wordpress-site.conf.j2 b/roles/wordpress-setup/templates/wordpress-site.conf.j2
@@ -121,6 +121,13 @@ server {
     deny all;
   }
   {% endblock %}
+
+  {% block blade_twig_templates -%}
+  # Prevent Blade and Twig templates from being accessed directly.
+  location ~* \.(blade\.php|twig)$ {
+    deny all;
+  }
+  {% endblock %}
 
   {% block location_primary -%}
   location / {