Fix security issue in regex

flant · Sep 2, 2019 · b531d01 · b531d01
1 parent 36fdc17
commit b531d01
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/run-proxy b/run-proxy
@@ -190,7 +190,7 @@ http {
     ssl_verify_client on;
 
     location ${LOCATION} {
-      if (\$ssl_client_s_dn_cn !~ "${USER}") {
+      if (\$ssl_client_s_dn_cn !~ "^${USER}$") {
         return 403;
       }
       proxy_http_version 1.1;