From: Sarah Hoffmann <lonvia@denofr.de>
Date: Fri, 14 Jun 2024 18:35:36 +0000 (+0200)
Subject: nominatim: filter for browser faking scripts
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/d971a54d8a040117097f818477d74f2a2877ea11

nominatim: filter for browser faking scripts
---

diff --git a/cookbooks/nominatim/templates/default/nginx.erb b/cookbooks/nominatim/templates/default/nginx.erb
index 5e74bef73..ddebe7c0b 100644
--- a/cookbooks/nominatim/templates/default/nginx.erb
+++ b/cookbooks/nominatim/templates/default/nginx.erb
@@ -69,7 +69,12 @@ geo $whitelisted {
     2620:52:3:1:5054:ff:fe0a:75aa 1; # gnome
 }
 
-map $missing_email$missing_referer$http_user_agent $blocked_user_agent {
+map $server_protocol$http_user_agent $cleaned_user_agent {
+    default $http_user_agent;
+    "~^HTTP/1..Mozilla/" Script$http_user_agent;
+}
+
+map $missing_email$missing_referer$cleaned_user_agent $blocked_user_agent {
    default 0;
    "11" 2; # block any requests without identifier
    include <%= @confdir %>/nginx_blocked_user_agent.conf;