Add hint toaliastraversal documentation

Document on what to do if an alias points to a file and should thus not end with a /
infrastrukt · Jul 8, 2019 · fa9315c · fa9315c
1 parent 3b2713b
commit fa9315c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/docs/en/plugins/aliastraversal.md b/docs/en/plugins/aliastraversal.md
@@ -23,3 +23,4 @@ In other words, the incorrect configuration of `alias` could allow an attacker t
 It's pretty simple:
   - you must find all the `alias` directives;
   - make sure that the parent prefixed location ends with directory separator.
+  - or if you want to map a signle file make sure the location starts with a `=`, e.g `=/i.gif` instead of `/i.gif`.