From 81582fff92c335eccb34362d6a31f37d4f91f16e Mon Sep 17 00:00:00 2001 From: Norwin Roosen Date: Thu, 6 Sep 2018 14:59:10 +0200 Subject: [PATCH] Revert "block kibana routes with write access in proxy" This reverts commit be27b4afa6bdd0e26439c2d1954428d8612176a8. Did break the ability to insert saved_objects to kibana! --- proxy/Caddyfile | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/proxy/Caddyfile b/proxy/Caddyfile index ca1ce99..7d93347 100644 --- a/proxy/Caddyfile +++ b/proxy/Caddyfile @@ -44,16 +44,6 @@ } {$WEB_DOMAIN}/kibana { - # block kibana write access endpoints - rewrite /api/console/proxy /BLOCKED - rewrite /api/logstash/.* /BLOCKED - rewrite /api/security/.* /BLOCKED - rewrite /api/saved_objects { - if {method} not GET - if {path} not_match /api/saved_objects/_bulk_get - to /BLOCKED - } - header / { X-XSS-Protection "1; mode=block" X-Content-Type-Options "nosniff"