varnishcache / varnish-devicedetect

VCL based device detection for Varnish Cache.
Other
299 stars 88 forks source link

Added a warning concerning X-UA-Device #14

Closed stbc closed 10 years ago

stbc commented 10 years ago

Commented the X-UA-Device, as we found out, that Google could interpret this wrong. Google marked our site as "hacked" without any real hack going on. We removed only that X-UA header, getting marked as clean again. It seems that Google is interpreting this as crafted content only for SEs (X-UA-Device:bot) as used by Viagra, Cialis SE hacks on servers (showing nothing to the browser, but spamming SE index with spam for bots)

daghf commented 10 years ago

I certainly was not aware of this - thanks a lot!

stbc commented 10 years ago

Ah, there are more occurrences of this for other methods to implement the device detection... Should be removed there as well.

lkarsten commented 10 years ago

We should remember to fix this in upstream Varnish documentation as well:

https://www.varnish-cache.org/docs/trunk/users-guide/devicedetection.html
stbc commented 10 years ago

Might be a good idea. As I wrote, those are only observations by us, based on our experience. As Googles algorithms are their best kept secret... :)