From 49d4ec8d1c004df5f3f3a7760112f679b5876d2d Mon Sep 17 00:00:00 2001 From: Alex Date: Thu, 21 May 2020 12:39:55 -0400 Subject: [PATCH] [deploy] Revert "Update safe params for Array params (#7914)" (#8018) This reverts commit 4eba14f15008564d53470ca7dd7ca2b2c8ad0b11. --- config/fastly/snippets/safe_params_list.vcl | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/config/fastly/snippets/safe_params_list.vcl b/config/fastly/snippets/safe_params_list.vcl index d677a614a..65a9d9e82 100644 --- a/config/fastly/snippets/safe_params_list.vcl +++ b/config/fastly/snippets/safe_params_list.vcl @@ -1,9 +1,7 @@ import querystring; sub vcl_recv { - # return this URL with only the parameters that match this regular expression - if (req.url !~ "/internal/" && req.url !~ "/search/") { - set req.http.decodeurl = urldecode(req.url); - set req.http.decodeurl = querystring.regfilter_except(req.http.decodeurl, "^(a_id|args|article_id|article_ids|articles|asc|callback_url|category|chat_channel_id|client_id|code|collection_id|commentable_id|commentable_type|confirmation_token|created_at|end|filter|followable_id|followable_type|fork_id|i|ids\[\]|key|message_offset|name|oauth_token|oauth_verifier|offset|org_id|organization_id|p|page|per_page|prefill|preview|purchaser|reactable_ids|redirect_uri|reported_url|reporter_username|response_type|scope|search|signature|sort|start|state|status|tag|tag_list|top|type_of|url|username|ut|verb)$"); - set req.url = req.http.decodeurl; - } + # return this URL with only the parameters that match this regular expression + if (req.url !~ "/internal/" && req.url !~ "/search/" && req.url !~ "/bulk_show") { + set req.url = querystring.regfilter_except(req.url, "^(a_id|args|article_id|article_ids|articles|asc|callback_url|category|chat_channel_id|client_id|code|collection_id|commentable_id|commentable_type|confirmation_token|created_at|end|filter|followable_id|followable_type|fork_id|i|key|message_offset|name|oauth_token|oauth_verifier|offset|org_id|organization_id|p|page|per_page|prefill|preview|purchaser|reactable_ids|redirect_uri|reported_url|reporter_username|response_type|scope|search|signature|sort|start|state|status|tag|tag_list|top|type_of|url|username|ut|verb)$"); + } }