mcp-server-semgrep/semgrep-rules/generic/nginx/security/alias-path-traversal.conf

MCP Server for Semgrep Integration - static code analysis with AI

server {
  listen 80;

  # ruleid: alias-path-traversal
  location /i {
    alias /data/w3/images/;
  }

  # ok: alias-path-traversal
  location /i/ {
    alias /data/w3/images/;
  }

  # ok: alias-path-traversal
  location /i {
    alias /data/w3/images;
  }

  # ok: alias-path-traversal
  location /fm/ {
    alias /usr/local/web/fm/dist/;
    index index.php;

    location ~ /([^/]+\.php)$ {
      try_files     /$1 =404;
      include       fastcgi_params;
    }
  }
}