SEC-208, blackhole python_lib.zip

missed file

missed rename

rename the file to make our convention

clarifying comment.

Stupid is as stupid does.

whitespace

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/cms.j2

@@ -83,6 +83,7 @@ error_page {{ k }} {{ v }};
   
   rewrite ^(.*)/favicon.ico$ /static/images/favicon.ico last;
 
+  {% include "python_lib.zip.j2" %}
 
   location @proxy_to_cms_app {
     {% if NGINX_SET_X_FORWARDED_HEADERS %}

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/lms-preview.j2

@@ -20,6 +20,8 @@ server {
 
   rewrite ^(.*)/favicon.ico$ /static/images/favicon.ico last;
 
+  {% include "python_lib.zip.j2" %}
+
   location @proxy_to_lms-preview_app {
     {% if NGINX_SET_X_FORWARDED_HEADERS %}
     proxy_set_header X-Forwarded-Proto $scheme;

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/lms.j2

@@ -113,6 +113,8 @@ error_page {{ k }} {{ v }};
 
   rewrite ^(.*)/favicon.ico$ /static/images/favicon.ico last;
 
+  {% include "python_lib.zip.j2" %}
+
   location @proxy_to_lms_app {
     {% if NGINX_SET_X_FORWARDED_HEADERS %}
     proxy_set_header X-Forwarded-Proto $scheme;

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/python_lib.zip.j2

+
+  # Blackholes an archive of python library files that instructors
+  # may provide for sandboxed python problem types, the internal
+  # directive will result in nginx emitting an nginx 404. Users
+  # will not be redirected to the application 404 page.
+  location ~* python_lib.zip {
+    internal;
+  }
+