Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

doc: server configuration: allow accessing and caching SVG assets #2074

Merged
merged 1 commit into from
Mar 1, 2024

Conversation

nodiscc
Copy link
Member

@nodiscc nodiscc commented Feb 17, 2024

Some themes (e.g. https://github.com/RolandTi/shaarli-stack) use SVG assets for example to provide the favicon. The web server configuration example provided in Shaarli's documentation does not allow accessing .svg files (a HTTP 403 error is returned).

This Pull Request fixes it by allowing access to .svg files in the example configuration for Apache and Nginx.

Even though no SVG files are used in the default template, I think there are no real security concerns allowing them by default. The alternative is to mention in the documentation of those themes, that the virtualhost configuration file should be edited (not very user-friendly)

/cc @RolandTi

nodiscc added a commit to nodiscc/xsrv that referenced this pull request Feb 17, 2024
- access to .svg files must be allowed in apache configuration
- ref. shaarli/Shaarli#2074
@nodiscc nodiscc merged commit 0a418b9 into shaarli:master Mar 1, 2024
8 checks passed
@nodiscc nodiscc deleted the doc-apache-allow-svg branch March 1, 2024 19:48
@nodiscc nodiscc added this to the 0.14.0 milestone Mar 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant