https://gcc.gnu.org/bugzilla/show_bug.cgi?id=121863

Mark Wielaard <mark at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |me at xeiaso dot net

--- Comment #6 from Mark Wielaard <mark at gcc dot gnu.org> ---
OK, I was wrong, Anubis doesn't automatically allow POSTs, but it can made to
do it.
I added the following to the policy:

  - name: bots-dont-post
    action: WEIGH
    weight:
      adjust: -15
    expression:
      all:
        - method == "POST"

  - name: allow-bugzilla-user
    action: WEIGH
    weight:
      adjust: -100
    expression:
      all:
        - '"Cookie" in headers'
        - headers["Cookie"].contains("Bugzilla_login=")
        - headers["Cookie"].contains("Bugzilla_logincookie=")

Which should get your weight below zero if you use POST and/or have a Bugzilla
login cookie. Then Anubis should not challenge you.

Reply via email to