I have the following setting in my nginx.conf but I am not sure what it does. I copied it from a Google search.
location / {
set $tempRequest $request;
if ($tempRequest ~ (.*)j_password=[^&]*(.*)) {
# Mask spring authentication password param.
set $tempRequest $1j_password=****$2;
}
Can someone explain what it does? I am using nginx as a proxy server for a grails application running on Tomcat.
I thought this setting would not show j_password
parameter when users submit the password at authentication time but I can see the value of j_password
using Chrome Inspect when the form is submitted.