Embed Notice

@phryk it's much better to make *explicit* exclusions in nginx config for /admin etc stuff, and for anything with cookies set, and obviously for any non-GET / non-HEAD request.

Again, unless you *really* know what you're doing and you have a large list of always-changing endpoints that need to be dynamic.

Which I am guessing here is not the case.