I have a tomcat behind a nginx, and I need to block returnUrl parameter that is outside my domain. From what I've found out, that it can be achieved by $arg_returnurl, but none of my tries nailed the problem.
1.4m articles
1.4m replys
5 comments
57.0k users