-
Notifications
You must be signed in to change notification settings - Fork 9
Closed
Description
Issue Details
The problem is that CoreLibs currently does not "copy" the ALPS extension from server to client:
https://vasilvv.github.io/httpbis-alps/draft-vvv-httpbis-alps.html
This may (and probably does) cause issues with some anti-DDOS and antibot systems as they may rely on ALPS to force the browser to send client hints:
https://datatracker.ietf.org/doc/html/draft-davidben-http-client-hint-reliability#section-4
So in the case of AdGuard they will send ALPS, CoreLibs won't pass it to the browser, the server won't receive client hints and will consider us a bot instead of a legitimate browser.
Proposed solution
Support ALPS and pass it to the client.
We may need to filter it and only pass what we can support.
Alternative solution
No response
Reactions are currently unavailable