Fix OpenBao login overlay runaway DOM loop and slow loads
Replace the MutationObserver feedback loop with bounded, idempotent apply retries so Firefox no longer hangs on the auth page. Route static UI assets and API calls around HTML sub_filter injection to keep bundles compressed.
This commit is contained in:
@@ -26,6 +26,16 @@ http {
|
||||
add_header Cache-Control "public, max-age=300";
|
||||
}
|
||||
|
||||
# Static UI bundles and API calls bypass HTML injection and stay compressed.
|
||||
location ~ ^/(v1|ui/assets|ui/engines-dist|ui/favicon\.svg) {
|
||||
proxy_pass http://openbao_upstream;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
location / {
|
||||
proxy_pass http://openbao_upstream;
|
||||
proxy_http_version 1.1;
|
||||
@@ -33,7 +43,7 @@ http {
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
# Disable upstream compression so sub_filter can rewrite HTML.
|
||||
# Disable upstream compression only for HTML shell injection.
|
||||
proxy_set_header Accept-Encoding "";
|
||||
proxy_buffering on;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user