Xe Iaso d0b8d9abc8 fix(honeypot): remove DoS vector ...

Using the User-Agent as a filtering vector for the honeypot maze was a
decent idea, however in practice it can become a DoS vector by a
malicious client adding a lot of points to Google Chrome's User-Agent
string. In practice it also seems that the worst offenders use vanilla
Google Chrome User-Agent strings as well, meaning that this backfires
horribly.

Gotta crack a few eggs to make omlettes.

Closes: #1580
Signed-off-by: Xe Iaso <me@xeiaso.net>

2026-04-23 09:01:12 -04:00

..

challenge

fix: nil ptr deref (#1467)

2026-03-18 18:02:57 +00:00

config

feat(metrics): basic auth support (#1579)

2026-04-23 00:17:09 -04:00

localization

l10n(de): revise and update German translations (#1457)

2026-03-21 20:02:49 +00:00

metrics

feat(metrics): basic auth support (#1579)

2026-04-23 00:17:09 -04:00

policy

feat: move metrics server config to the policy file (#1572)

2026-04-21 15:36:11 -04:00

store

chore: gofix (#1466)

2026-03-18 14:17:28 +00:00

testdata

feat(http): set "Cache-Control: no-store" on error responses (#1474)

2026-03-16 10:36:40 +00:00

thoth

chore: gofix (#1466)

2026-03-18 14:17:28 +00:00

anubis_test.go

chore: gofix (#1466)

2026-03-18 14:17:28 +00:00

anubis.go

fix: nil ptr deref (#1467)

2026-03-18 18:02:57 +00:00

config_test.go

chore: gofix (#1466)

2026-03-18 14:17:28 +00:00

config.go

fix(honeypot): remove DoS vector

2026-04-23 09:01:12 -04:00

http_test.go

feat(http): set "Cache-Control: no-store" on error responses (#1474)

2026-03-16 10:36:40 +00:00

http.go

fix: nil ptr deref (#1467)

2026-03-18 18:02:57 +00:00

redirect_security_test.go

perf: apply fieldalignement (#1284)

2025-11-16 20:43:07 +00:00