first commit

nginx/insecure-configuration/configuration/error1.conf

@@ -0,0 +1,13 @@
+server {
+	listen 8080;
+
+	root /usr/share/nginx/html;
+
+	index index.html;
+
+	server_name _;
+
+	location / {
+		return 302 http://$host:$server_port$uri;
+	}
+}

nginx/insecure-configuration/configuration/error2.conf

@@ -0,0 +1,15 @@
+server {
+	listen 8081;
+
+	root /usr/share/nginx/html;
+
+	index index.html;
+
+	server_name _;
+
+    autoindex on;
+
+	location /files {
+        alias /home/;
+    }
+}

nginx/insecure-configuration/configuration/error3.conf

@@ -0,0 +1,23 @@
+server {
+	listen 8082;
+
+	root /usr/share/nginx/html;
+
+	index index.html;
+
+	server_name _;
+
+    autoindex on;
+
+    add_header Content-Security-Policy "default-src 'self'";
+    add_header X-Frame-Options DENY;
+
+	location = /test1 {
+		rewrite ^(.*)$ /xss.html break;
+	}
+
+    location = /test2 {
+        add_header X-Content-Type-Options nosniff;
+        rewrite ^(.*)$ /xss.html break;
+    }
+}