patterns/waf_patterns/nginx/leakages.conf

# Nginx WAF rules for LEAKAGES
# Automatically generated from OWASP rules.
# Include this file in your server or location block.

map $request_uri $waf_block_leakages {
    default 0;
    "~*^#!s?/" 1;
    "~*^5d{2}$" 1;
    "~*(?:<(?:TITLE>Index of.*?<H|title>Index of.*?<h)1>Index of|>[To Parent Directory]</[Aa]><br>)" 1;
}

if ($waf_block_leakages) {
    return 403;
    # Log the blocked request (optional)
    # access_log /var/log/nginx/waf_blocked.log;
}