WeebDataHoarder
9a6f25df59
http/query: preserve raw query state when modifying url query
2025-06-09 13:49:37 +02:00
WeebDataHoarder
163fce6cfc
challenge/resource-load: use proper redirect URL to current issued challenge, add static/dynamic cache bust
2025-05-13 23:43:31 +02:00
WeebDataHoarder
0e62f80f9b
challenges: prevent unbounded growth of stored cookies by bundling all state onto a single JWT token
2025-05-03 17:30:39 +02:00
WeebDataHoarder
1ea19c5a6c
state context: Added proxy-safe-link-tags to proxy <link> tags, use specific LinkTags ranger on templates instead of raw elements
2025-05-03 04:12:58 +02:00
WeebDataHoarder
f6a8f50a53
settings/backend: allow configuring dial and transport timeouts
2025-05-01 22:23:23 +02:00
WeebDataHoarder
a9f03267b6
settings: allow transparent backends that don't set all values
2025-04-30 20:54:50 +02:00
WeebDataHoarder
61655b6a02
utils: remove debug print of all received networks on RADb
2025-04-28 12:25:53 +02:00
WeebDataHoarder
b8bf35d4de
utils: fix radb fetching lines too long for scanner buffer size, allow caching empty results
2025-04-27 22:04:21 +02:00
WeebDataHoarder
e7ef9af42a
utils: remove debug initialization code from RADb helper
2025-04-27 21:42:58 +02:00
WeebDataHoarder
3234c4e801
feature: Implement <meta> tag fetcher from backends with allow-listed entries to prevent unwanted keys to pass
2025-04-27 21:40:59 +02:00
WeebDataHoarder
0473109e60
http: allow specifying Go DNS resolver on config backends
2025-04-27 13:16:42 +02:00
WeebDataHoarder
9541c58eeb
settings: introduce settings YAML file to complement cmd arguments
2025-04-24 18:26:06 +02:00
WeebDataHoarder
6bb7ca979d
Implement cache for networks
2025-04-23 20:35:20 +02:00
WeebDataHoarder
a0224cb21c
policy: allow fetching ASN directly via RADb WHOIS service
2025-04-23 20:35:20 +02:00
WeebDataHoarder
9719c0ff39
Support atomically swapping http handler for passhtrough
2025-04-23 20:35:20 +02:00
WeebDataHoarder
ead41055ca
Condition, rules, state and action refactor / rewrite
...
Add nested rules
Add backend action, allow wildcard in backends
Remove poison from tree, update README with action table
Allow defining pass/fail actions on challenge,
Remove redirect/referer parameters on backend pass
Set challenge cookie tied to host
Rewrite DNSBL condition into a challenge
Allow passing an arbitrary path for assets to js challenges
Optimize programs exhaustively on compilation
Activation instead of map for CEL context, faster map access, new network override
Return valid host on cookie setting in case Host is an IP address.
bug: does not work with IPv6, see https://github.com/golang/go/issues/65521
Apply TLS fingerprinter on GetConfigForClient instead of GetCertificate
Cleanup go-away cookies before passing to backend
Code action for specifically replying with an HTTP code
2025-04-23 20:35:20 +02:00
WeebDataHoarder
2cd6d0cebf
Remove x/exp/slices override
2025-04-13 16:44:54 +02:00
WeebDataHoarder
ca49c99cad
Add support for JA3N / JA4 TLS fingerprinting
2025-04-12 02:13:05 +02:00
WeebDataHoarder
f6f00a54da
Go 1.22 -> Go 1.24 bump
2025-04-11 07:50:02 +02:00
WeebDataHoarder
ce111f6ae9
Add DNSBL querying in conditions
2025-04-08 22:11:58 +02:00
WeebDataHoarder
1c2d1e008c
Added refresh button to challenges and deny pages where reasonable, ensure no open redirect or other
2025-04-07 19:24:22 +02:00
WeebDataHoarder
e08a5697f6
Minor cleanup of challenges code, bind session http cookies to issued tokens
2025-04-07 19:00:53 +02:00
WeebDataHoarder
411f028f56
Move backends to cmd args, allow setting private key seed via parameter or ENV var
2025-04-06 03:08:19 +02:00
WeebDataHoarder
7d436cbdb4
Embed go exp package requirements to ensure we don't use arbitrary exp, move utilities to utils
2025-04-06 02:02:54 +02:00
WeebDataHoarder
105477c3ee
Remove exp slices requirement
2025-04-06 01:59:47 +02:00
