add guppy csrf

uc-cdis · Dec 15, 2023 · 07a044b · 07a044b
1 parent a6340ec
commit 07a044b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/kube/services/revproxy/gen3.nginx.conf/guppy-service.conf b/kube/services/revproxy/gen3.nginx.conf/guppy-service.conf
@@ -1,4 +1,8 @@
           location /guppy/ {
+              if ($csrf_check !~ ^ok-\S.+$) {
+                return 403 "failed csrf check";
+              }
+
               proxy_connect_timeout 600s;
               proxy_send_timeout 600s;
               proxy_read_timeout 600s;