For static content, only match static at the root of the URI.

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/cms.j2

@@ -69,7 +69,7 @@ server {
   {% include "robots.j2" %}
 
   # Check security on this
-  location ~ /static/(?P<file>.*) {
+  location ~ ^/static/(?P<file>.*) {
     root {{ edxapp_data_dir }};
     try_files /staticfiles/$file /course_static/$file =404;
 

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/lms-preview.j2

@@ -49,7 +49,7 @@ server {
   {% include "robots.j2" %}
 
   # Check security on this
-  location ~ /static/(?P<file>.*) {
+  location ~ ^/static/(?P<file>.*) {
     root {{ edxapp_data_dir}};
     try_files /staticfiles/$file /course_static/$file =404;
 

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/lms.j2

@@ -65,7 +65,7 @@ server {
   {% include "robots.j2" %}
 
   # Check security on this
-  location ~ /static/(?P<file>.*) {
+  location ~ ^/static/(?P<file>.*) {
     root {{ edxapp_data_dir }};
     try_files /staticfiles/$file /course_static/$file =404;