Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CRM-21629 System Check: Set User Agent to security filters accept check #11488

Merged
merged 1 commit into from
Jan 11, 2018

Conversation

tommybobo
Copy link
Contributor

@tommybobo tommybobo commented Jan 5, 2018

Overview

Set User Agent for the code that performs System Check of Resource URL. Security filters often block clients with blank User Agents. This code set the User Agent to CiviCRM.

Before

Current checks show up as user agent "-". Which results in a blocked connection on some sites, and results in a false positive check.

After

The check goes through as it should if filters are in place.

@seamuslee001
Copy link
Contributor

Jenkins re test this please

@mlutfy
Copy link
Member

mlutfy commented Jan 10, 2018

Seems good to me.

@MegaphoneJon You mentioned on JIRA having run into this issue as well. Can you test the patch?

@MegaphoneJon
Copy link
Contributor

I replicated the problem (with iThemes Security for WordPress), confirmed this patch fixes the problem. I also reviewed the code and think this is correct.

@mlutfy
Copy link
Member

mlutfy commented Jan 11, 2018

(CiviCRM Review Template WORD-1.0)

  • (r-jira) ✔
  • (r-test) ✔
  • (r-code) ✔
  • (r-doc) ✔ n/a
  • (r-maint) ✔
  • (r-run) ✔ Tested by Jon
  • (r-user) ✔ n/a
  • (r-tech) ✔ not ideal, but since it's calling get_headers directly, instead of using a class/lib, not worth obsessing over it.

@mlutfy mlutfy merged commit 06aec1a into civicrm:master Jan 11, 2018
@mlutfy mlutfy added this to the 4.7.31 milestone Feb 9, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants