3 ms·

Sounds like a WAF is getting in the way. Wikileaks had the same issue years ago when you couldn't search for programming language binaries e.g "Ruby" or "Perl"

• kzrdude 5y ago
  What's waf?
  • bigiain 5y ago
    Web Application Firewall. https://en.wikipedia.org/wiki/Web_application_firewall https://en.wikipedia.org/wiki/Web_application_firewall
  • Grollicus 5y ago
    https://en.wikipedia.org/wiki/Web_application_firewall https://en.wikipedia.org/wiki/Web_application_firewall Basically something to extract boatloads of money from enterprise customers by annoying THEIR customers so they can't write "<script>" in texts in their application. Or, less tongue-in-cheek, a way to harden web applications against known attack patterns like sql injections or xss-attacks. As they work on pattern recognition and don't know anything about your application they sometimes get in the way. But they'll probably check some box for some security audit so they're used. Cloudflare for example offers one at https://www.cloudflare.com/waf/ https://www.cloudflare.com/waf/
    • a-dub 5y ago
      oh weird. i thought they also did stuff like parse and reconstruct requests to try and catch any funny business and centralize/add ease for things like ratelimiting and fail2ban for webapps. looking at this one, it appears not.
    • saint_abroad 5y ago
      > But they'll probably check some box for some security audit so they're used. A WAF is useful for when a zero-day is found for that legacy application you just can't get patches for anymore because the team has "moved on".
  • deleted 5y ago
    [deleted]