Update nginx.conf.j2 - Githubissues

Stouts / Stouts.jenkins

Ansible role which manage Jenkins CI

MIT License

41 stars 35 forks source link

Update nginx.conf.j2 #13

Closed mxxcon closed 9 years ago

mxxcon commented 9 years ago

If you enable "Prevent Cross Site Request Forgery exploits" in Jenkins, it starts sending .crumb header with csrf token. However, by default Nginx accepts only alpha-numeric headers. This change allowed Nginx to pass this header through. Otherwise Jenkins will begin cursing with "403 No valid crumb included in request".

klen commented 9 years ago

Ok, thank you.