mirror of
https://gitlab.com/openstapps/openstapps.git
synced 2026-01-10 19:52:53 +00:00
fix: deny PUT method requests
This commit is contained in:
@@ -1,6 +1,6 @@
|
|||||||
add_header 'Access-Control-Allow-Origin' '*';
|
add_header 'Access-Control-Allow-Origin' '*';
|
||||||
add_header 'Access-Control-Allow-Credentials' 'true';
|
add_header 'Access-Control-Allow-Credentials' 'true';
|
||||||
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT';
|
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
|
||||||
add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,X-StApps-Version';
|
add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,X-StApps-Version';
|
||||||
add_header 'Access-Control-Max-Age' 1728000;
|
add_header 'Access-Control-Max-Age' 1728000;
|
||||||
add_header 'Content-Type' 'text/plain charset=UTF-8';
|
add_header 'Content-Type' 'text/plain charset=UTF-8';
|
||||||
|
|||||||
@@ -33,7 +33,7 @@ location {{{ route }}} {
|
|||||||
{{{ cors }}}
|
{{{ cors }}}
|
||||||
return 503;
|
return 503;
|
||||||
}
|
}
|
||||||
limit_except GET OPTIONS POST PUT {
|
limit_except GET OPTIONS POST {
|
||||||
deny all;
|
deny all;
|
||||||
}
|
}
|
||||||
# backend is available
|
# backend is available
|
||||||
|
|||||||
Reference in New Issue
Block a user