So I guess if I want it to not fall apart if there are weird backslashes in the request or the user agent, then I can't use AWK :blobcatverysad:

@wallhackio @vaporeon_ imagine a purrticularly evil user who wanted to make your life hell and decided to add quotation marks to the user agent

@aescling @wallhackio Exactly! The user-agent and request string are controlled by the user and so I want my parsing to not fall apart regardless of what a user puts there

And request strings containg " actually have appeared in practice, this is an actual line from my logs (of someone trying to do malicious stuff...):

2025-04-12_07:05:09 "POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disable_functions%3D\"\"+%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 196 - "-" "-"
Follow

@vaporeon_ @wallhackio oh huh, i would have expected them to be URL-encoded in the request. granted that really is only a suggestion fur even the characters you must encode. you can just not

Sign in to participate in the conversation
📟🐱 GlitchCat

A small, community‐oriented Mastodon‐compatible Fediverse (GlitchSoc) instance managed as a joint venture between the cat and KIBI families.