openvibers/openvibe.space Commits

Space: the tenant vhost's function location quotes its regex (nginx reads an unquoted {0,39} as a block) (#63)

OP OpenVibers committed 28 days ago · 6e24526785 · 1 file, +1 −1

Changes

ddiff --git a/deploy/nginx/openvibe.website.conf b/deploy/nginx/openvibe.website.conf
iindex 62138ad..a25a642 100644
---- a/deploy/nginx/openvibe.website.conf
++++ b/deploy/nginx/openvibe.website.conf
@@@ -20,7 +20,7 @@ server {
add_header Strict-Transport-Security "max-age=31536000" always;
# A space's functions (/api/<name>, server/spaces/functions.js) also take POST, a small body and the page's
# Bearer token (the space SDK's sign-in); cookies never pass, as everywhere on a tenant host.
-- location ~ ^/api/[a-z0-9][a-z0-9-]{0,39}/?$ {
++ location ~ "^/api/[a-z0-9][a-z0-9-]{0,39}/?$" {
limit_except GET HEAD POST { deny all; }
client_max_body_size 64k;
limit_req zone=ovspace_sites burst=200 nodelay;