From 2eae2a4cf5ed2507f6525e2f3c2e055935eeda0e Mon Sep 17 00:00:00 2001 From: Xe Iaso Date: Fri, 24 Jan 2025 15:34:10 -0500 Subject: cmd/anubis: don't include Accept-Encoding in challenge Browsers are known to change the Accept-Encoding header based on what media type is being accepted. I kinda hate this too, but such is life. Signed-off-by: Xe Iaso --- cmd/anubis/main.go | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'cmd/anubis/main.go') diff --git a/cmd/anubis/main.go b/cmd/anubis/main.go index bda4892..4de13ed 100644 --- a/cmd/anubis/main.go +++ b/cmd/anubis/main.go @@ -131,8 +131,7 @@ func (s *Server) challengeFor(r *http.Request) string { fp := sha256.Sum256(s.priv.Seed()) data := fmt.Sprintf( - "Accept-Encoding=%s,Accept-Language=%s,X-Real-IP=%s,User-Agent=%s,WeekTime=%s,Fingerprint=%x", - r.Header.Get("Accept-Encoding"), + "Accept-Language=%s,X-Real-IP=%s,User-Agent=%s,WeekTime=%s,Fingerprint=%x", r.Header.Get("Accept-Language"), r.Header.Get("X-Real-Ip"), r.UserAgent(), -- cgit v1.2.3