chore: only allow valid http methods

Informasjonsforvaltning · Feb 4, 2025 · 77afaef · 77afaef
1 parent 3c0d4ee
commit 77afaef
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/nginx.conf b/nginx.conf
@@ -10,6 +10,11 @@ http {
         listen 8080;
         server_name default_server;
 
+        # Only allow valid HTTP methods
+        if ($request_method !~ ^(GET|POST|PUT|DELETE|HEAD|OPTIONS|PATCH)$) {
+            return 405;
+        }
+
         location ~ /enhetsregisteret/api/enheter/(.*) {
             default_type application/json;
             proxy_intercept_errors on;