NeusoftSecurity / SEnginx

Security-Enhanced nginx by Neusoft corporation.

Home Page:www.senginx.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Feature request: set $Roboo_challenge_hash_input

valintinr opened this issue · comments

Hello,
As I saw in sources cookie value is based on $remote_addr only.
Can we get "set $Roboo_challenge_hash_input" for prevent issues behind NAT users (actually we already have client with similar issues but now Im not sured abut this).
In perl Roboo we using next:

set $Roboo_challenge_hash_input $remote_addr$http_user_agent;

OK, this is considerable

@valintinr , a new directive 'robot_mitigation_hash_input' is supported now, refer to this commit: 98c9450

Perfect.
Thank you!!!