Cavemanon/Nginx-Lua-Anti-DDoS
8
Fork 0
mirror of https://github.com/C0nw0nk/Nginx-Lua-Anti-DDoS.git synced 2023-12-14 04:31:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update anti_ddos_challenge.lua

Browse Source 
Added fix to stop Cloudflare from cache busting peoples websites with their captcha and javascript pages that add a pointless query string onto the end of sites urls this will remove their silly query string protecting your backends web applications and keeping your caches clean from junk like this it will also speed up your site since you will have a Higher Cache HIT ratio since they can't bypass your cache with this query string.

.com/index.php?__cf_chl_captcha_tk__=blahblahblah
.com/index.php?__cf_chl_jschl_tk__=blahblahblah
This commit is contained in:
C0nw0nk
2020-04-09 21:00:03 +01:00
committed by GitHub
parent f30e80d788
commit 5a3ac398b9
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lua/anti_ddos_challenge.lua
View File

@ -605,6 +605,9 @@ local query_string_remove_args_table = {
{
".*", --all sites
{ --query strings to remove to improve Cache HIT Ratios and Stop attacks / Cache bypassing and Busting.
--Cloudflare cache busting query strings (get added to url from captcha and javascript pages very naughty breaking sites caches)
"__cf_chl_jschl_tk__",
"__cf_chl_captcha_tk__",
--facebook cache busting query strings
"fb_action_ids",
"fb_action_types",