Content Security Policy - Nginx

2019-06-09 Thread Sathish Kumar
Hi, I would like to enable Content Security Policy header on Nginx for our website to protect from data injection attacks and XSS. Can I add like the below config?. If anybody hit our URL they will know the allowed domains in the header. Is there any other bettery way to do this? add_header Cont

NGINX Phase Order

2019-06-09 Thread Taim T
Hello I am writing a full-page cache module for NGINX. But I ran into some issues, I searched online for a possible solution, but no success. What happens is that I need to hook my module in NGX_HTTP_PRECONTENT_PHASE, so that module can make cache related decisions. Everything is good, so far ca

Re: broken header without HAProxy

2019-06-09 Thread arashad
Everything worked after removing the proxy_protocol. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,284428,284491#msg-284491 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Securing URLs with the Secure Link Module in NGINX

2019-06-09 Thread Francis Daly
On Sat, Jun 08, 2019 at 02:44:22PM +, Andrew Andonopoulos wrote: Hi there, > Thanks for the clarification, so all requests will be like this: > > http:///hls// > > can i include in the map the domain http://example.com, the folder /hls/ and > ignore all the rest? You can. I'm not sure why