add csrf guppy (#2425)

uc-cdis · Dec 11, 2023 · df000c3 · df000c3
1 parent eaf04bf
commit df000c3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/kube/services/revproxy/gen3.nginx.conf/guppy-service.conf b/kube/services/revproxy/gen3.nginx.conf/guppy-service.conf
@@ -1,4 +1,7 @@
           location /guppy/ {
+              if ($csrf_check !~ ^ok-\S.+$) {
+                return 403 "failed csrf check";
+              }
               proxy_connect_timeout 600s;
               proxy_send_timeout 600s;
               proxy_read_timeout 600s;