diff --git a/docs/en/plugins/aliastraversal.md b/docs/en/plugins/aliastraversal.md new file mode 100644 index 0000000..e69de29 diff --git a/docs/en/plugins/origins.md b/docs/en/plugins/origins.md index 9e1b027..7b1017e 100644 --- a/docs/en/plugins/origins.md +++ b/docs/en/plugins/origins.md @@ -17,7 +17,7 @@ The most common errors with this configuration are: Misconfiguration example: ```nginx -if ($http_origin ~* ((^https://www\.yandex\.ru)|(^https://ya\.ru)/)) { +if ($http_origin ~* ((^https://www\.yandex\.ru)|(^https://ya\.ru)$)) { add_header 'Access-Control-Allow-Origin' "$http_origin"; add_header 'Access-Control-Allow-Credentials' 'true'; } diff --git a/docs/ru/plugins/aliastraversal.md b/docs/ru/plugins/aliastraversal.md new file mode 100644 index 0000000..e69de29 diff --git a/docs/ru/plugins/origins.md b/docs/ru/plugins/origins.md index 51221d7..00b86b0 100644 --- a/docs/ru/plugins/origins.md +++ b/docs/ru/plugins/origins.md @@ -17,7 +17,7 @@ Пример плохой конфигурации: ```nginx -if ($http_origin ~* ((^https://www\.yandex\.ru)|(^https://ya\.ru)/)) { +if ($http_origin ~* ((^https://www\.yandex\.ru)|(^https://ya\.ru)$)) { add_header 'Access-Control-Allow-Origin' "$http_origin"; add_header 'Access-Control-Allow-Credentials' 'true'; }