mirror of
https://github.com/TecharoHQ/anubis.git
synced 2026-02-08 12:59:55 -06:00
9c47c180d0
* test: add httpdebug tool Signed-off-by: Xe Iaso <me@xeiaso.net> * fix(data/clients/git): more strictly match the git client Signed-off-by: Xe Iaso <me@xeiaso.net> * fix(default-config): make the default config far less paranoid This uses a variety of heuristics to make sure that clients that claim to be browsers are more likely to behave like browsers. Most of these are based on the results of a lot of reverse engineering and data collection from honeypot servers. Signed-off-by: Xe Iaso <me@xeiaso.net> * docs: update CHANGELOG Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net> Signed-off-by: Xe Iaso <xe.iaso@techaro.lol>
21 lines
618 B
YAML
21 lines
618 B
YAML
- name: allow-git-clients
|
|
action: ALLOW
|
|
expression:
|
|
all:
|
|
- >
|
|
(
|
|
userAgent.startsWith("git/") ||
|
|
userAgent.contains("libgit") ||
|
|
userAgent.startsWith("go-git") ||
|
|
userAgent.startsWith("JGit/") ||
|
|
userAgent.startsWith("JGit-")
|
|
)
|
|
- '"Accept" in headers'
|
|
- headers["Accept"] == "*/*"
|
|
- '"Cache-Control" in headers'
|
|
- headers["Cache-Control"] == "no-cache"
|
|
- '"Pragma" in headers'
|
|
- headers["Pragma"] == "no-cache"
|
|
- '"Accept-Encoding" in headers'
|
|
- headers["Accept-Encoding"].contains("gzip")
|