mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
The VNC page's token travels in the websocket URL, so nginx's access log and anyone who saw the URL had it for 120 s, and it opened the console as a bearer token. novncd now also wants the session cookie of the token's user. Its refusals were a warning without a user or an address: they now name the client address (nginx sends X-Real-IP to novncd too) and leave a Logs row "VNC console refused: reason". |
||
|---|---|---|
| .. | ||
| centos_nginx.conf | ||
| debian_nginx.conf | ||
| suse_nginx.conf | ||
| ubuntu_nginx.conf | ||
| webvirtcloud.conf | ||