Untested but should work;

between http {}
map $request $shellshockblock {
default 0;
~*\:\; 1;
~*ping 1;
~*\/bash 1;
}

inside location {} if ($shellshockblock) { return 412; }

---
nginx for Windows http://nginx-win.ecsds.eu/