From 9beab7723b947f78d4f394c87e210c0a3c64191d Mon Sep 17 00:00:00 2001 From: Clark Boylan Date: Thu, 5 Oct 2023 15:32:31 -0700 Subject: [PATCH] Update the apache ua filter set There are always more UAs to add to the list. It does look like they are now using all the chrome versions with android. To match these I've added regexes to the very end of the list so that we don't have to list hundreds of rules separately. We might be able to collapse of the earlier rules too, but in theory having direct matches first is faster? Change-Id: Ic0a84aabea4327d40fa89aef6eb9f9a2d42a658f --- .../apache-ua-filter/files/ua-filter.conf | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/playbooks/roles/apache-ua-filter/files/ua-filter.conf b/playbooks/roles/apache-ua-filter/files/ua-filter.conf index 672aa420ae..ee8340b90c 100644 --- a/playbooks/roles/apache-ua-filter/files/ua-filter.conf +++ b/playbooks/roles/apache-ua-filter/files/ua-filter.conf @@ -74,9 +74,25 @@ RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (Linux; Android 10; SM-G981B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.162 Mobile Safari/537.36" [OR] RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.91 Mobile Safari/537.36" [OR] RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 QQ/8.0.8.458 V1_IPH_SQ_8.0.8_1_APP_A Pixel/1242 Core/WKWebView Device/Apple(iPhone XS) NetType/WIFI QBWebViewType/1 WKType/1" [OR] + RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 12_3_1 like Mac OS X) AppleWebKit/606.2.35 (KHTML, like Gecko) Mobile/15E148 QQ/8.0.8.458 V1_IPH_SQ_8.0.8_1_APP_A Pixel/1242 Core/WKWebView Device/Apple(iPhone XS) NetType/WIFI QBWebViewType/1 WKType/1" [OR] RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.5(0x17000523) NetType/WIFI Language/zh_CN" [OR] + RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/606.2.34 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.5(0x17000523) NetType/WIFI Language/zh_CN" [OR] RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" [OR] - RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1" + RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/606.2.17 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" [OR] + RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/607.2.16 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" [OR] + RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1" [OR] + RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/606.2.87 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1" [OR] + RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (Linux; U; Android 2.3.7; zh-cn; MB200 Build/GRJ22; CyanogenMod-7) AppleWebKit/535.2 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 7\.1\.1; OPPO R9sk Build/NMF26F.*" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 7\.1\.1; OPPO R9sk\) AppleWebKit/537\.36.*" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; U; Android 7\.1\.1; zh-CN; OPPO R9sk Build/NMF26F\) AppleWebKit/537\.36.*" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; U; Android 7\.1\.1; zh-cn; OPPO R9sk Build/NMF26F\) AppleWebKit/537\.36.*" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 8\.0\.0; SM-G955U Build/R16NW\) AppleWebKit/537\.36.*" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 9; COL-AL10 Build/HUAWEICOL-AL10; wv\) AppleWebKit/537\.36.*" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 9; MI 9 Build/PKQ1\.181121\.001\) AppleWebKit/537\.36.*" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 9; MI 9\) AppleWebKit/537\.36.*" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 9; V1924A Build/PKQ1\.190714\.001; wv\) AppleWebKit/537\.36.*" [OR] + RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; U; Android 9; zh-CN; MI 9 Build/PKQ1\.181121\.001\) AppleWebKit/537\.36.*" RewriteRule . - [R=403,L]