opendev/system-config
Code Issues Proposed changes

Update the apache ua filter set

Browse Source 
There are always more UAs to add to the list. It does look like they are
now using all the chrome versions with android. To match these I've
added regexes to the very end of the list so that we don't have to list
hundreds of rules separately. We might be able to collapse of the
earlier rules too, but in theory having direct matches first is faster?

Change-Id: Ic0a84aabea4327d40fa89aef6eb9f9a2d42a658f
This commit is contained in:
Clark Boylan 2023-10-05 15:32:31 -07:00
parent 40bdcd848c
commit 9beab7723b
1 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
playbooks/roles/apache-ua-filter/files/ua-filter.conf
View File

@ -74,9 +74,25 @@
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (Linux; Android 10; SM-G981B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.162 Mobile Safari/537.36" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (Linux; Android 11; Pixel 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.91 Mobile Safari/537.36" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 QQ/8.0.8.458 V1_IPH_SQ_8.0.8_1_APP_A Pixel/1242 Core/WKWebView Device/Apple(iPhone XS) NetType/WIFI QBWebViewType/1 WKType/1" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 12_3_1 like Mac OS X) AppleWebKit/606.2.35 (KHTML, like Gecko) Mobile/15E148 QQ/8.0.8.458 V1_IPH_SQ_8.0.8_1_APP_A Pixel/1242 Core/WKWebView Device/Apple(iPhone XS) NetType/WIFI QBWebViewType/1 WKType/1" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.5(0x17000523) NetType/WIFI Language/zh_CN" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/606.2.34 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.5(0x17000523) NetType/WIFI Language/zh_CN" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1"
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/606.2.17 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/607.2.16 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/606.2.87 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1" [OR]
RewriteCond %{HTTP_USER_AGENT} "=Mozilla/5.0 (Linux; U; Android 2.3.7; zh-cn; MB200 Build/GRJ22; CyanogenMod-7) AppleWebKit/535.2 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 7\.1\.1; OPPO R9sk Build/NMF26F.*" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 7\.1\.1; OPPO R9sk\) AppleWebKit/537\.36.*" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; U; Android 7\.1\.1; zh-CN; OPPO R9sk Build/NMF26F\) AppleWebKit/537\.36.*" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; U; Android 7\.1\.1; zh-cn; OPPO R9sk Build/NMF26F\) AppleWebKit/537\.36.*" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 8\.0\.0; SM-G955U Build/R16NW\) AppleWebKit/537\.36.*" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 9; COL-AL10 Build/HUAWEICOL-AL10; wv\) AppleWebKit/537\.36.*" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 9; MI 9 Build/PKQ1\.181121\.001\) AppleWebKit/537\.36.*" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 9; MI 9\) AppleWebKit/537\.36.*" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; Android 9; V1924A Build/PKQ1\.190714\.001; wv\) AppleWebKit/537\.36.*" [OR]
RewriteCond %{HTTP_USER_AGENT} "^Mozilla/5.0 \(Linux; U; Android 9; zh-CN; MI 9 Build/PKQ1\.181121\.001\) AppleWebKit/537\.36.*"
RewriteRule . - [R=403,L]
</Macro>