sophie/nuke
1
0
Fork 0
Code Packages 1 Activity Actions

fix(default-config): sometimes browsers don't send Upgrade-Insecure-Requests (#1189)

Browse source 
Signed-off-by: Xe Iaso <me@xeiaso.net>
This commit is contained in:
Xe Iaso 2025-10-13 14:31:14 -04:00 • committed by GitHub
parent a12b4bb755
commit 00261d049e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
data/botPolicies.yaml
View file

@ -107,7 +107,6 @@ bots:
- '"Sec-Fetch-Dest" in headers' - '"Sec-Fetch-Dest" in headers'
- '"Sec-Fetch-Mode" in headers' - '"Sec-Fetch-Mode" in headers'
- '"Sec-Fetch-Site" in headers' - '"Sec-Fetch-Site" in headers'
- '"Upgrade-Insecure-Requests" in headers'
- '"Accept-Encoding" in headers' - '"Accept-Encoding" in headers'
- '( headers["Accept-Encoding"].contains("zstd") || headers["Accept-Encoding"].contains("br") )' - '( headers["Accept-Encoding"].contains("zstd") || headers["Accept-Encoding"].contains("br") )'
- '"Accept-Language" in headers' - '"Accept-Language" in headers'
@ -115,6 +114,13 @@ bots:
weight: weight:
adjust: -10 adjust: -10
# The Upgrade-Insecure-Requests header is typically sent by browsers, but not always
- name: upgrade-insecure-requests
expression: '"Upgrade-Insecure-Requests" in headers'
action: WEIGH
weight:
adjust: -2
# Chrome should behave like Chrome # Chrome should behave like Chrome
- name: chrome-is-proper - name: chrome-is-proper
expression: expression:

8
data/meta/default-config.yaml
View file

@ -91,7 +91,6 @@
- '"Sec-Fetch-Dest" in headers' - '"Sec-Fetch-Dest" in headers'
- '"Sec-Fetch-Mode" in headers' - '"Sec-Fetch-Mode" in headers'
- '"Sec-Fetch-Site" in headers' - '"Sec-Fetch-Site" in headers'
- '"Upgrade-Insecure-Requests" in headers'
- '"Accept-Encoding" in headers' - '"Accept-Encoding" in headers'
- '( headers["Accept-Encoding"].contains("zstd") || headers["Accept-Encoding"].contains("br") )' - '( headers["Accept-Encoding"].contains("zstd") || headers["Accept-Encoding"].contains("br") )'
- '"Accept-Language" in headers' - '"Accept-Language" in headers'
@ -99,6 +98,13 @@
weight: weight:
adjust: -10 adjust: -10
# The Upgrade-Insecure-Requests header is typically sent by browsers, but not always
- name: upgrade-insecure-requests
expression: '"Upgrade-Insecure-Requests" in headers'
action: WEIGH
weight:
adjust: -2
# Chrome should behave like Chrome # Chrome should behave like Chrome
- name: chrome-is-proper - name: chrome-is-proper
expression: expression: