whitelist add GDPR erase API path

GrapheneOS · Nov 18, 2024 · 23e88ae · 23e88ae
1 parent a99d1b8
commit 23e88ae
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
@@ -608,6 +608,17 @@ http {
             fastcgi_pass backend;
         }
 
+        location /gdpr/erasure/confirm/ {
+            if ($request_method != GET) {
+                return 405;
+            }
+            if ($same_origin_lax_or_get != 1) {
+                return 403;
+            }
+            limit_req zone=flarum-limit burst=32 nodelay;
+            fastcgi_pass backend;
+        }
+
         location /d/ {
             if ($request_method != GET) {
                 return 405;