From: Grant Slater <git@firefishy.com>
Date: Sat, 7 Mar 2015 16:48:11 +0000 (+0000)
Subject: Only allow HTTP GET tile requests (NOT POST)
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/de513ccb36b72c747c81dac3047182e719f89cba

Only allow HTTP GET tile requests (NOT POST)
---

diff --git a/cookbooks/tilecache/templates/default/squid.conf.erb b/cookbooks/tilecache/templates/default/squid.conf.erb
index ca658c296..1c47a7a83 100644
--- a/cookbooks/tilecache/templates/default/squid.conf.erb
+++ b/cookbooks/tilecache/templates/default/squid.conf.erb
@@ -45,7 +45,9 @@ acl blacklist_path urlpath_regex ^/zecmd/
 http_access allow osmtile_sites whitelist_path
 http_access deny blacklist_path
 
-http_access allow osmtile_sites
+acl requestMethodGet method GET
+
+http_access allow osmtile_sites requestMethodGet
 
 acl osmtile_nocache_url urlpath_regex \.png/(status|dirty)$
 cache deny osmtile_sites osmtile_nocache_url