How to allow access only to certain file extensions in nginx?

Question

Nginx

For example, there is a /upload folder with a bunch of folders and files, and you need to allow access to it only if access is requested to images like png jpg gif
And in the /source folder only to js and css files.
And so that php files and other executive files cannot be launched in these folders, even if .jpg or another allowed extension is substituted at the end (for example /upload/index.php?s=1.jpg )
I would be grateful for a good example of how to do it correctly !

Answer 1

location ^~ /upload {
    location ~ \.(png|jpe?g|gif)$ {

    }
    return 403;
}

location ^~ /source {
    location ~ \.(js|css)$ {

    }
    return 403;
}