Skip to content

C
configuration
Unverified Commit 6b817024 by Cory Lee Committed by GitHub
Options

Removing the 403 for internal IP disclosure because it is breaking ecom (#4566)

parent 93d7741d
Showing with 0 additions and 3 deletions
playbooks/roles/edx_django_service/templates/edx/app/nginx/sites-available/app.j2
...@@ -10,7 +10,6 @@ server { ...@@ -10,7 +10,6 @@ server {
listen {{ edx_django_service_nginx_port }}; listen {{ edx_django_service_nginx_port }};
{% if NGINX_ENABLE_SSL %} {% if NGINX_ENABLE_SSL %}
{% include "concerns/handle-ip-disclosure.j2" %}
rewrite ^ https://$host$request_uri? permanent; rewrite ^ https://$host$request_uri? permanent;
{% else %} {% else %}
{% include "concerns/handle-tls-terminated-elsewhere-redirect.j2" %} {% include "concerns/handle-tls-terminated-elsewhere-redirect.j2" %}
......
playbooks/roles/edx_django_service/templates/edx/app/nginx/sites-available/concerns/handle-tls-terminated-elsewhere-redirect.j2
{% if NGINX_REDIRECT_TO_HTTPS %} {% if NGINX_REDIRECT_TO_HTTPS %}
{% include "concerns/handle-ip-disclosure.j2" %}
{% if NGINX_HTTPS_REDIRECT_STRATEGY == "scheme" %} {% if NGINX_HTTPS_REDIRECT_STRATEGY == "scheme" %}
if ($scheme != "https") if ($scheme != "https")
{ {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment