l prism.r: fix HTTP-Spliting vuln

This commit is contained in:
lassulus 2019-10-10 12:45:19 +02:00
parent dfc4a42f69
commit ee36de2973

View File

@ -379,7 +379,7 @@ with import <stockholm/lib>;
services.nginx.virtualHosts."lassul.us".locations."^~ /transmission".extraConfig = '' services.nginx.virtualHosts."lassul.us".locations."^~ /transmission".extraConfig = ''
if ($scheme != "https") { if ($scheme != "https") {
rewrite ^ https://$host$uri permanent; rewrite ^ https://$host$request_uri permanent;
} }
auth_basic "Restricted Content"; auth_basic "Restricted Content";
auth_basic_user_file ${pkgs.writeText "transmission-user-pass" '' auth_basic_user_file ${pkgs.writeText "transmission-user-pass" ''