anubis-mirror

arian/anubis-mirror

Fork 0

mirror of https://github.com/TecharoHQ/anubis.git synced 2026-04-24 00:56:39 +00:00

Author	SHA1	Message	Date
Xe Iaso	d0b8d9abc8	fix(honeypot): remove DoS vector Using the User-Agent as a filtering vector for the honeypot maze was a decent idea, however in practice it can become a DoS vector by a malicious client adding a lot of points to Google Chrome's User-Agent string. In practice it also seems that the worst offenders use vanilla Google Chrome User-Agent strings as well, meaning that this backfires horribly. Gotta crack a few eggs to make omlettes. Closes: #1580 Signed-off-by: Xe Iaso <me@xeiaso.net>	2026-04-23 09:01:12 -04:00

Author

SHA1

Message

Date

Xe Iaso

d0b8d9abc8

fix(honeypot): remove DoS vector

Using the User-Agent as a filtering vector for the honeypot maze was a
decent idea, however in practice it can become a DoS vector by a
malicious client adding a lot of points to Google Chrome's User-Agent
string. In practice it also seems that the worst offenders use vanilla
Google Chrome User-Agent strings as well, meaning that this backfires
horribly.

Gotta crack a few eggs to make omlettes.

Closes: #1580
Signed-off-by: Xe Iaso <me@xeiaso.net>

2026-04-23 09:01:12 -04:00

Compare commits

1 Commits

main .. Xe/dataset-maze-oops

Diff Content Not Available

Compare commits

1 Commits main .. Xe/dataset-maze-oops

Diff Content Not Available

1 Commits

main .. Xe/dataset-maze-oops