diff --git a/src/config.rs b/src/config.rs index f4c40b2..726e793 100644 --- a/src/config.rs +++ b/src/config.rs @@ -187,6 +187,7 @@ impl Default for Config { TrapPattern::as_plain("/.env"), TrapPattern::as_plain("/config"), TrapPattern::as_plain("/actuator/"), + TrapPattern::as_plain("/_profiler/phpinfo"), // More aggressive patterns for various PHP exploits. // XXX: I dedicate this entire section to that one single crawler // that has been scanning my entire network, hitting 403s left and right diff --git a/src/network.rs b/src/network.rs index 56d6c65..226ed00 100644 --- a/src/network.rs +++ b/src/network.rs @@ -80,7 +80,9 @@ pub async fn handle_connection( if header_end_pos == 0 { if let Some(pos) = find_header_end(&request_data) { header_end_pos = pos; - break; + // XXX: Breaking here appears to be malforming the request + // and causing 404 errors. + // So, continue reading the body if present but do not break. } }