Skip to content
This repository has been archived by the owner on Sep 20, 2024. It is now read-only.

Commit

Permalink
Revert "block kibana routes with write access in proxy"
Browse files Browse the repository at this point in the history
This reverts commit be27b4a.

Did break the ability to insert saved_objects to kibana!
  • Loading branch information
noerw committed Sep 6, 2018
1 parent be27b4a commit 81582ff
Showing 1 changed file with 0 additions and 10 deletions.
10 changes: 0 additions & 10 deletions proxy/Caddyfile
Original file line number Diff line number Diff line change
Expand Up @@ -44,16 +44,6 @@
}

{$WEB_DOMAIN}/kibana {
# block kibana write access endpoints
rewrite /api/console/proxy /BLOCKED
rewrite /api/logstash/.* /BLOCKED
rewrite /api/security/.* /BLOCKED
rewrite /api/saved_objects {
if {method} not GET
if {path} not_match /api/saved_objects/_bulk_get
to /BLOCKED
}

header / {
X-XSS-Protection "1; mode=block"
X-Content-Type-Options "nosniff"
Expand Down

0 comments on commit 81582ff

Please sign in to comment.