middleware to reject non-gemini requests #3

New Issue

tjp · 2023-01-12T16:42:19Z

tjp commented

2023-01-12 16:42:19 +00:00

Gemini (weirdly IMO) allows for users to send gemini requests for non-gemini resources.

A gemini request is just <URL><CR><LF>, and nothing disallows the "scheme" component of the URL being "http" or "gopher", etc.

Probably the sanest default is to reject all these with 53 Proxy request refused, but configuration is stranger to allow these than denying with a middleware. So let's start there.

Gemini (weirdly IMO) allows for users to send gemini requests for non-gemini resources. A gemini request is just `<URL><CR><LF>`, and nothing disallows the "scheme" component of the URL being "http" or "gopher", etc. Probably the sanest default is to reject all these with `53 Proxy request refused`, but configuration is stranger to allow these than denying with a middleware. So let's start there.

tjp added the

enhancement

label 2023-01-14 18:05:29 +00:00

tjp added this to the v1.0 milestone 2023-01-14 18:06:27 +00:00

tjp added the

easy

label 2023-01-14 19:06:50 +00:00

tjp added this to the (deleted) project 2023-01-19 20:58:36 +00:00

tjp referenced this issue from a commit

2023-01-28 22:36:59 +00:00

middleware to turn away non-gemini requests. fixes #3.

tjp closed this issue