NginxProxyManager / nginx-proxy-manager

Docker container for managing Nginx proxy hosts with a simple, powerful interface
https://nginxproxymanager.com
MIT License
22.61k stars 2.63k forks source link

libwww-perl should not be blocked by default #4033

Open phulstaert opened 2 weeks ago

phulstaert commented 2 weeks ago

Is it really needed to block the agent "libwww-perl" by default? It is very commonly used in Perl to access API's.

https://github.com/NginxProxyManager/nginx-proxy-manager/blame/63d06da8a8591e7a9b2a1873eb91ce1c42b2b0f9/docker/rootfs/etc/nginx/conf.d/include/block-exploits.conf#L102

One of the first things you see on their github page is how to change the agent you are supplying with the call. So if it is used for hacking or scraping, you can bet on it having another agent-string. You will bother more people then you help with this. In my opinion it is never good to block an entire library.