aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHenare Degan <henare.degan@gmail.com>2015-04-17 09:44:43 +1000
committerHenare Degan <henare.degan@gmail.com>2015-04-17 09:44:43 +1000
commitdb2db066394a99f33321fa1681a57c17e270e4e6 (patch)
tree9d9e00ac068de5efe2fd0f516a5d6060b350870f
parent10d060fed2acbca06abd37dd30de41aa6185a80d (diff)
Don't remove cookies from txt files in suggested Varnish configuration
Since the authentication cookies are removed it means that admins can't download raw emails: https://github.com/openaustralia/righttoknow/issues/513
-rw-r--r--config/varnish-alaveteli.vcl2
1 files changed, 1 insertions, 1 deletions
diff --git a/config/varnish-alaveteli.vcl b/config/varnish-alaveteli.vcl
index d3726682c..a9a7b92f4 100644
--- a/config/varnish-alaveteli.vcl
+++ b/config/varnish-alaveteli.vcl
@@ -72,7 +72,7 @@ sub vcl_recv {
}
# Ignore Cookies on images...
- if (req.url ~ "\.(png|gif|jpg|jpeg|swf|css|js|rdf|ico|txt)(\?.*|)$") {
+ if (req.url ~ "\.(png|gif|jpg|jpeg|swf|css|js|rdf|ico)(\?.*|)$") {
remove req.http.Cookie;
return (lookup);
}