diff options
| author | Xe Iaso <me@xeiaso.net> | 2025-04-25 15:02:55 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-04-25 15:02:55 -0400 |
| commit | c669b47b570d222a9a902705adeff8fb26c989c4 (patch) | |
| tree | 7e996f85eb55d9bc5158e537119ca72efdb82b3b /docs | |
| parent | 24f8ba729b180fb420995b8c6b592f23b3e5a552 (diff) | |
| download | anubis-c669b47b570d222a9a902705adeff8fb26c989c4.tar.xz anubis-c669b47b570d222a9a902705adeff8fb26c989c4.zip | |
fix(lib): make Anubis less paranoid (#365)v1.17.0-beta1
Previously Anubis would aggressively make sure that the client cookie
matched exactly what it should. This has turned out to be too paranoid
in practice and has caused problems with Happy Eyeballs et. al.
This is a potential fix to #303 and #289.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/docs/CHANGELOG.md | 1 | ||||
| -rw-r--r-- | docs/docs/admin/policies.mdx | 2 |
2 files changed, 2 insertions, 1 deletions
diff --git a/docs/docs/CHANGELOG.md b/docs/docs/CHANGELOG.md index 2b38413..bedd38e 100644 --- a/docs/docs/CHANGELOG.md +++ b/docs/docs/CHANGELOG.md @@ -37,6 +37,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Set or append to `X-Forwarded-For` header unless the remote connects over a loopback address [#328](https://github.com/TecharoHQ/anubis/issues/328) - Fixed mojeekbot user agent regex - Added support for running anubis behind a base path (e.g. `/myapp`) +- Reduce Anubis' paranoia with user cookies ([#365](https://github.com/TecharoHQ/anubis/pull/365)) ## v1.16.0 diff --git a/docs/docs/admin/policies.mdx b/docs/docs/admin/policies.mdx index 975faef..8722d9e 100644 --- a/docs/docs/admin/policies.mdx +++ b/docs/docs/admin/policies.mdx @@ -241,6 +241,6 @@ In case your service needs it for risk calculation reasons, Anubis exposes infor | :---------------- | :--------------------------------------------------- | :--------------- | | `X-Anubis-Rule` | The name of the rule that was matched | `bot/lightpanda` | | `X-Anubis-Action` | The action that Anubis took in response to that rule | `CHALLENGE` | -| `X-Anubis-Status` | The status and how strict Anubis was in its checks | `PASS-FULL` | +| `X-Anubis-Status` | The status and how strict Anubis was in its checks | `PASS` | Policy rules are matched using [Go's standard library regular expressions package](https://pkg.go.dev/regexp). You can mess around with the syntax at [regex101.com](https://regex101.com), make sure to select the Golang option. |