[squid-users] Useragent request/reply headers with squid .

[Antony Stone]

On Saturday 15 June 2019 at 10:57:44, --Ahmad-- wrote:

> Hello Folks ,
> 
> im trying to disable user agent info to be leaked out of squid

Just out of interest, why?

> using :
> 
> request_header_access User-Agent deny all
> reply _header_access User-Agent deny all
> 
> squid very 3.5.x

I'm not sure I understand that.

> but when i test sending the user agent info via curl info it seems squid is
> not removing it and passing it to the server
> 
> curl -x    x.x.x.x:19000    -U pass:pass  -X POST
> https://uploadbeta.com/api/parse-user-agent/ -d
> "s=nUser-Agent:%20Mozilla/4.0%20(compatible;%20MSIE%207.0;%20linux%20NT%20
> 6.1)”
> 
> result ——>>>>>>>>> {"platform":"linux","browser":"MSIE","version":"7.0”}

What happens if you try an HTTP request instead of HTTPS?

> as you see above i tried with squid to disable useragent , but in curl it
> seems squid leaked it
> 
> any idea why squid leaking useragent ?

Is this an intercept proxy, or have you set environment variables so that curl 
knows to send its request via Squid?


Antony.

-- 
"If I've told you once, I've told you a million times - stop exaggerating!"

                                                   Please reply to the list;
                                                         please *don't* CC me.