Fixed security related issues in nginx conf
@@ -15,7 +15,9 @@ server {
if ($ssl_protocol = "") {
return 308 https://$host$request_uri;
}
-
+ if ($request_method !~ ^(GET|HEAD|POST)$ ) {
+ return 405;
+ }
index index.html;
access_log /var/log/nginx/st2webui.access.log combined;
@@ -135,6 +137,8 @@ server {
root /opt/stackstorm/static/webui/;
index index.html;
+ proxy_set_header Range "";
+
sendfile on;
tcp_nopush on;
tcp_nodelay on;
