Compare commits

..

No commits in common. "0a8d5ec13e65c5a09f82dc8ad00768d4f13be658" and "da01f1fd33133a47e34e4dfe14ea849ce4dc4880" have entirely different histories.

2 changed files with 1 additions and 4 deletions

View file

@ -187,7 +187,6 @@ impl Default for Config {
TrapPattern::as_plain("/.env"), TrapPattern::as_plain("/.env"),
TrapPattern::as_plain("/config"), TrapPattern::as_plain("/config"),
TrapPattern::as_plain("/actuator/"), TrapPattern::as_plain("/actuator/"),
TrapPattern::as_plain("/_profiler/phpinfo"),
// More aggressive patterns for various PHP exploits. // More aggressive patterns for various PHP exploits.
// XXX: I dedicate this entire section to that one single crawler // XXX: I dedicate this entire section to that one single crawler
// that has been scanning my entire network, hitting 403s left and right // that has been scanning my entire network, hitting 403s left and right

View file

@ -80,9 +80,7 @@ pub async fn handle_connection(
if header_end_pos == 0 { if header_end_pos == 0 {
if let Some(pos) = find_header_end(&request_data) { if let Some(pos) = find_header_end(&request_data) {
header_end_pos = pos; header_end_pos = pos;
// XXX: Breaking here appears to be malforming the request break;
// and causing 404 errors.
// So, continue reading the body if present but do not break.
} }
} }