dgtlmoon / dgtlmoon/changedetection.io
Default `User-Agent` header could cause uninteded consequences
- Dominant language
- Python
- Stars
- 34.1k
- Forks
- 2k
- Avg merge
- 23h 38m
- Merged PRs (30d)
- 67
Description
This is more of an informative message than a bug. The default user agent is configured in `/settings#fetching` and is configurable. Although, some sites can behave differently when a browser user agent is supplied.
```
; curl 'https://jira.atlassian.com/rest/issueNav/1/issueTable' -H 'X-Atlassian-Token: no-check' -X POST -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36' -w '%{http_code}\n'
XSRF check failed404
; curl 'https://jira.atlassian.com/rest/issueNav/1/issueTable' -H 'X-Atlassian-Token: no-check' -X POST -H 'User-Agent: curl' -w '%{http_code}\n'
400
```
Found this the hard way.
Contributor guide
Assessment
This issue has not been assessed yet.