We were previously disallowing empty user agents, but we weren't blocking requests where the User-Agent header wasn't set at all. This commit blocks those requests. This commit also blocks Chrome 74. It's a 2.5-year-old version of an evergreen browser that releases every 6 weeks, so this is clearly a bot spoofing this header. |
||
|---|---|---|
| .. | ||
| bad_bot_detection.vcl | ||
| check_for_remember_user_token_in_cookie_to_set_header.vcl | ||
| safe_params_list.vcl | ||
| stale_while_revalidate_controls.vcl | ||