Disallow Bad Requests suggestion

  • ElectroN

    (@ihou)


    2 months, 1 week ago

    Hi,

    In case someone experience this as well.
    If the websites is in cyrilic and you have the Disallow Bad Requests turned on.

    The search throws an error 403 with more than 2-3 words as it decodes cyrilic in UTF and the query gets a bit long.

    Developers, might want to put an option to whitelist the /?s= query maybe…


    Cheers!

    • This topic was modified 2 months, 1 week ago by ElectroN.
Viewing 1 replies (of 1 total)
  • Plugin Author Ludwig You

    (@ludwigyou)

    2 months, 1 week ago

    Hi,

    Thanks a lot for reporting this and for taking the time to explain the context so clearly 👍
    That’s a very helpful edge case.

    We’re going to take a closer look at this behavior and see what we can do to improve it on our side. Adding a safer handling for search queries (for example, an option related to /?s=) is something we’ll evaluate carefully to avoid reducing overall security.

    No promise yet, but it’s definitely on our radar now.
    Thanks again for the constructive feedback 🙏

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.