From a6207ea99f476fdee28949b8c4f904db4c6a6bbb Mon Sep 17 00:00:00 2001
From: Jason Cameron <jason.cameron@stanwith.me>
Date: Fri, 14 Nov 2025 15:56:53 -0800
Subject: [PATCH] docs(challenge): fix panic when validating challenges in
 privacy-mode browsers

---
 docs/docs/CHANGELOG.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/docs/CHANGELOG.md b/docs/docs/CHANGELOG.md
index d428cc03..250882bf 100644
--- a/docs/docs/CHANGELOG.md
+++ b/docs/docs/CHANGELOG.md
@@ -13,6 +13,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 <!-- This changes the project to: -->
 
+- Fix panic when validating challenges after privacy-mode browsers strip headers and the follow-up request matches an `ALLOW` threshold.
 - Expose WEIGHT rule matches as Prometheus metrics.
 - Allow more OCI registry clients [based on feedback](https://github.com/TecharoHQ/anubis/pull/1253#issuecomment-3506744184).
 - Expose services directory in the embedded `(data)` filesystem.