<div dir="ltr">oh this is insane<div>now i open chrome incognito window and it works!!</div><div><br></div><div>how is that even possible?</div><div>how can browser still downloading this file? while new incognito session obeys nginx rules??</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Dec 3, 2016 at 2:54 PM, Francis Daly <span dir="ltr"><<a href="mailto:francis@daoine.org" target="_blank">francis@daoine.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Sat, Dec 03, 2016 at 02:27:50PM +0000, Musta Fa wrote:<br>
<br>
Hi there,<br>
<br>
</span><span class="">> while i request files<br>
> <a href="http://domain.com/config.xml" rel="noreferrer" target="_blank">http://domain.com/config.xml</a><br>
> or<br>
> <a href="http://domain.com/include/config.xml" rel="noreferrer" target="_blank">http://domain.com/include/<wbr>config.xml</a><br>
> both files downloaded, which is not good,<br>
<br>
</span>When I do it:<br>
<br>
$ curl <a href="http://127.0.0.1:8888/config.xml" rel="noreferrer" target="_blank">http://127.0.0.1:8888/config.<wbr>xml</a><br>
Did match: /config.xml<br>
$ curl <a href="http://127.0.0.1:8888/include/config.xml" rel="noreferrer" target="_blank">http://127.0.0.1:8888/include/<wbr>config.xml</a><br>
Did not match: /include/config.xml<br>
<br>
The first matches (and so is blocked), and the second does not match<br>
(and so it allowed). I think that that is what you want?<br>
<br>
Either you are not using the configuration you think you are using;<br>
or you have other configuration that you are not showing.<br>
<div class="HOEnZb"><div class="h5"><br>
        f<br>
--<br>
Francis Daly        <a href="mailto:francis@daoine.org">francis@daoine.org</a><br>
<br>
______________________________<wbr>_________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org">nginx@nginx.org</a><br>
<a href="http://mailman.nginx.org/mailman/listinfo/nginx" rel="noreferrer" target="_blank">http://mailman.nginx.org/<wbr>mailman/listinfo/nginx</a><br>
</div></div></blockquote></div><br></div>