Matt
Matt
Yes please too. Thanks for your work on this @willpower232!
@liudongmiao I've tried this, whilst it did stop nginx crashing/needing a reset, it completely broke scanning web requests correctly. ``` ModSecurity: Warning. Matched "Operator `Rx' with parameter `^\d+$' against variable...
I believe PCRE(1). ``` configure arguments: --with-cc-opt='-g -O2 -fdebug-prefix-map=/build/nginx-7KvRN5/nginx-1.18.0=. -fstack-protector-strong -Wformat -Werror=format-security -fPIC -Wdate-time -D_FORTIFY_SOURCE=2' --with-ld-opt='-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -fPIC' --prefix=/usr/share/nginx --conf-path=/etc/nginx/nginx.conf --http-log-path=/var/log/nginx/access.log --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --modules-path=/usr/lib/nginx/modules --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi...
Thanks for the reference to https://github.com/SpiderLabs/ModSecurity/pull/2728, we've put this back to the master release and tried that. Rules seem to be obeyed correctly and we'll monitor for any crashing.
I think thats what @adamcooke means. You can add it to your messages as Postal sends them through as it receives them. So you should be adding the headers at...
@zeba121 The feature request is open. So that is the current status. It's best not to @ the developers who spend their own time on what is effectively free software....
Within the GA4 Data Settings / Data Collection page: ``` Enable Google signals data collection By activating Google signals, you enable Google Analytics to collect data about your traffic in...
The part of the gtag/js is: ``` var Ty=function(a,b,c,d){var e=a+"?"+b;Qy&&(d=!(0===e.indexOf("https://www.google-analytics.com/g/collect")||0===e.indexOf("https://analytics.google.com/g/collect")));Ry&&d&&!Kx?Py(e,c):Sy(a,b,c)},Uy=function(a){return a&&0===a.indexOf("google.")&&"google.com"!=a?"https://www.%/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&".replace("%",a):void 0},Ry=!1;Ry=!0;var Qy=!1;var Vy=function(){this.C=1;this.F={};this.g=new Sf;this.o=-1};Vy.prototype.s=function(a,b){var c=this,d;try{d=new Ly(a,this.F,b)}catch(n){a.abort()}var e=Mx(a);e&&this.g.C(d)||this.flush();if(e&&this.g.add(d)){if(0>this.o){var f=A,g=f.setTimeout,h;a.Ua()?Wy?(Wy=!1,h=Xy):h=Yy:h=5E3;this.o=g.call(f,function(){return c.flush()},h)}}else{var l=Uf(d,this.C++);Ty(d.o,l.rf,l.body,d.C);Zy(d,a.Ee,a.ob,String(a.Db(R.jd,a.B(R.jd))))}}; ``` It seems they're using a % in place...
Line 330 seems to be the offending one. ``` var KA={};var LA={};LA[S.cg]="cc";LA[S.dg]="ci";LA[S.eg]="cm";LA[S.fg]="cn";LA[S.gg]="cs";LA[S.hg]="ck";var BA=function(){var a="www";HA&&GA&&(a=GA);return"https://"+a+".google-analytics.com/*(Zw)*/*(Y29sbGVjdA)*"},AA=function(){var a;HA&&GA&&(a=GA);return"https://"+(a?a+".":"")+"mydomain.com/xxx/*(YW5hbHl0aWNzLmdvb2dsZS5jb20)*/*(Zw)*/*(Y29sbGVjdA)*"}, ``` The original line of which: ``` var KA={};var LA={};LA[S.cg]="cc";LA[S.dg]="ci";LA[S.eg]="cm";LA[S.fg]="cn";LA[S.gg]="cs";LA[S.hg]="ck";var BA=function(){var a="www";HA&&GA&&(a=GA);return"https://"+a+".google-analytics.com/g/collect"},AA=function(){var a;HA&&GA&&(a=GA);return"https://"+(a?a+".":"")+"analytics.google.com/g/collect"}, ``` No...
It appears this instance of google-analytics.com in the code needs a specialContentReplace due to the prefix it uses of `https://"+a+".`.