From 21afa0fcfaa33b828f56f2df74dc4c45bc2548c2 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Sat, 22 Jun 2019 16:32:42 +0200 Subject: [PATCH] Add Referrer Whitelisting Test --- .dev-tools/custom-bad-referrers.conf | 49 ++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 .dev-tools/custom-bad-referrers.conf diff --git a/.dev-tools/custom-bad-referrers.conf b/.dev-tools/custom-bad-referrers.conf new file mode 100644 index 000000000..1367a6f39 --- /dev/null +++ b/.dev-tools/custom-bad-referrers.conf @@ -0,0 +1,49 @@ +# EDIT THIS FILE AS YOU LIKE TO ADD ANY ADDITIONAL BAD REFERRER DOMAINS YOU WANT TO SCAN FOR ### + +### VERSION INFORMATION # +################################################### +### Version: V3.2018.05 +### Updated: 2018-08-21 +################################################### +### VERSION INFORMATION ## + +############################################################################## +# _ __ _ # +# / |/ /__ _(_)__ __ __ # +# / / _ `/ / _ \\ \ / # +# /_/|_/\_, /_/_//_/_\_\ # +# __/___/ __ ___ __ ___ __ __ # +# / _ )___ ____/ / / _ )___ / /_ / _ )/ /__ ____/ /_____ ____ # +# / _ / _ `/ _ / / _ / _ \/ __/ / _ / / _ \/ __/ '_/ -_) __/ # +# /____/\_,_/\_,_/ /____/\___/\__/ /____/_/\___/\__/_/\_\\__/_/ # +# # +############################################################################## + +# This is merely an example and gets auto included as since Version 2.2017.07 introduced on 2017-04-20 +# This file must exist on your system or Nginx will fail a reload due to a missing file +# Only add one entry per line + +# Make sure any domains have dots and special characters escaped as per the Regex examples below. +# For example some-veryvery-randomwebsitename-thatdoesnotexist4.com should be entered as +# some\-veryvery\-randomwebsitename\-thatdoesnotexist4\.com + +# ***************************************************************************************** +# PLEASE MAKE SURE that you use word regex boundaries to avoid false positive detection !!! +# ***************************************************************************************** + +# As you can see in the examples below the domain "someveryveryrandomwebsitenamethatdoesnotexist1\.com" +# is entered with a preceding \b and an ending \b +# this makes it now "\bsomeveryveryrandomwebsitenamethatdoesnotexist1\.com\b". +# It is crucial to use the word boundaries regex formatting. +# --------- +# EXAMPLES: +# --------- +# BY DEFAULT ALL THE EXAMPLES BELOW ARE COMMENTED OUT AND HENCE NOT ENABLED +# "~*\bsomeveryveryrandomwebsitenamethatdoesnotexist1\.com\b" 1; +# "~*\bsomeveryveryrandomwebsitenamethatdoesnotexist2\.com\b" 1; +# "~*\bsomeveryveryrandomwebsitenamethatdoesnotexist3\.com\b" 1; +# "~*\bsome\-veryvery\-randomweb\-sitenamethatdoesnotexist4\.com\b" 1; + + "~*\bzx6\.ru\b" 1; + + \ No newline at end of file