Merge pull request #7 from flant/fix-regex

Fix security issue in regex
flant · Sep 4, 2019 · 0344716 · 0344716
2 parents 36fdc17 + b531d01
commit 0344716
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/run-proxy b/run-proxy
@@ -190,7 +190,7 @@ http {
     ssl_verify_client on;
 
     location ${LOCATION} {
-      if (\$ssl_client_s_dn_cn !~ "${USER}") {
+      if (\$ssl_client_s_dn_cn !~ "^${USER}$") {
         return 403;
       }
       proxy_http_version 1.1;