Anubis challenge returns 500 to clients that do not accept gzip #2

Closed
opened 2026-10-01 18:59:25 -03:00 by marcos-mendez · 0 comments
marcos-mendez commented 2026-10-01 18:59:25 -03:00 (Migrated from github.com)

Seen in the Phase 3 run of the step7b Web image (2026-10-01), cloud simple mode: an unverified Googlebot request without Accept-Encoding: gzip got HTTP 500 instead of the Anubis challenge page; with gzip the challenge is served. Likely related to the Coraza body handling (libnginx-mod-http-coraza#2/#3 and coraza_delay_response_headers off from common#25) or to Anubis' own encoding. Reproduce on the image with curl with and without --compressed, find the cause, and add the no-gzip case to the Phase 3 test.

Seen in the Phase 3 run of the step7b Web image (2026-10-01), cloud simple mode: an unverified Googlebot request without Accept-Encoding: gzip got HTTP 500 instead of the Anubis challenge page; with gzip the challenge is served. Likely related to the Coraza body handling (libnginx-mod-http-coraza#2/#3 and coraza_delay_response_headers off from common#25) or to Anubis' own encoding. Reproduce on the image with curl with and without --compressed, find the cause, and add the no-gzip case to the Phase 3 test.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Keel-Linux/keel-web#2
No description provided.