[Plugin: Bad Behavior] Range starting at 0 is legitimate (2 posts)

  1. Will Norris
    Posted 7 years ago #

    The comment (and accompanying code) in Bad Behavior that "Real user-agents do not start ranges at 0" is wrong. The JanRain OpenID libraries specify Range: bytes=0-1048576 because the library only cares about the first 1024 KB. This is a perfectly legitimate request, and blocking it breaks the ability for users of Bad Behavior to login to many OpenID relying parties using the JanRain libraries (which is quite a few).

  2. error
    Posted 7 years ago #

    Update to Bad Behavior 2.0.23 or later, where issues with OpenID should be fixed.

Topic Closed

This topic has been closed to new replies.

About this Topic