@vaporeon_ awkward indeed
@wallhackio @vaporeon_ i don’t think you would ever reasonably have to deal with that scenario but like, that would fuck everything up fur regex parsing
@aescling @wallhackio Exactly! The user-agent and request string are controlled by the user and so I want my parsing to not fall apart regardless of what a user puts there
And request strings containg " actually have appeared in practice, this is an actual line from my logs (of someone trying to do malicious stuff...):
2025-04-12_07:05:09 "POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disable_functions%3D\"\"+%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 196 - "-" "-"
@vaporeon_ @wallhackio oh huh, i would have expected them to be URL-encoded in the request. granted that really is only a suggestion fur even the characters you must encode. you can just not
@wallhackio @vaporeon_ imagine a purrticularly evil user who wanted to make your life hell and decided to add quotation marks to the user agent