fix: hide proxy headers for CORS

This commit is contained in:
2021-10-26 11:04:30 +02:00
parent 7bac0dae66
commit 056b83e32c
+12
View File
@@ -86,6 +86,12 @@ http {
proxy_set_header Authorization $authorization;
proxy_hide_header x-amz-id-2;
proxy_hide_header x-amz-request-id;
proxy_hide_header 'Access-Control-Expose-Headers';
proxy_hide_header 'Access-Control-Allow-Origin';
proxy_hide_header 'Access-Control-Allow-Credentials';
proxy_hide_header 'Access-Control-Allow-Methods';
proxy_hide_header 'Access-Control-Allow-Headers';
proxy_hide_header 'Access-Control-Max-Age';
add_header X-File-URL $returnurl;
resolver 8.8.8.8 valid=300s;
@@ -153,6 +159,12 @@ http {
proxy_set_header Authorization $authorization;
proxy_hide_header x-amz-id-2;
proxy_hide_header x-amz-request-id;
proxy_hide_header 'Access-Control-Expose-Headers';
proxy_hide_header 'Access-Control-Allow-Origin';
proxy_hide_header 'Access-Control-Allow-Credentials';
proxy_hide_header 'Access-Control-Allow-Methods';
proxy_hide_header 'Access-Control-Allow-Headers';
proxy_hide_header 'Access-Control-Max-Age';
add_header X-File-URL $returnurl;
resolver 8.8.8.8 valid=300s;