Bug 507978 - Phabricator is 403 when user agent contains name of blacklisted OS
Summary: Phabricator is 403 when user agent contains name of blacklisted OS
Status: RESOLVED INTENTIONAL
Alias: None
Product: www.kde.org
Classification: Websites
Component: general (other bugs)
Version First Reported In: unspecified
Platform: Microsoft Windows Microsoft Windows
: NOR normal
Target Milestone: ---
Assignee: kde-www mailing-list
URL:
Keywords:
: 507977 (view as bug list)
Depends on:
Blocks:
 
Reported: 2025-08-07 13:27 UTC by Roke Julian Lockhart Beedell
Modified: 2025-08-27 09:54 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
A Duplicate Of The Page (556 bytes, text/html)
2025-08-07 13:27 UTC, Roke Julian Lockhart Beedell 		Details
View All Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description Roke Julian Lockhart Beedell 2025-08-07 13:27:07 UTC 
Created attachment 183856 [details]
A Duplicate Of The Page

SUMMARY

Phabricator is 403, across multiple browsers.

STEPS TO REPRODUCE

Visit https://phabricator.kde.org/#:~:text=Forbidden,Server%20at%20phabricator.kde.org%20Port%20443.

OBSERVED RESULT

> ~~~
> <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
> <html><head>
> <title>403 Forbidden</title>
> </head><body>
> <h1>Forbidden</h1>
> <p>You don't have permission to access this resource.</p>
> <hr>
> <address>Apache/2.4.18 (Ubuntu) Server at phabricator.kde.org Port 443</address>
> </body></html>
> ~~~

EXPECTED RESULT

I should be able to visit it.

ADDITIONAL INFORMATION

Ascertained at https://bugs.kde.org/show_bug.cgi?id=507977#c1.
Comment 1 Tobias Fella 2025-08-07 14:07:48 UTC 
*** Bug 507977 has been marked as a duplicate of this bug. ***
Comment 2 Ben Cooksley 2025-08-07 18:47:49 UTC 
Phabricator is only accessible currently on FOSS devices due to abuse by AI crawlers sorry.
Comment 3 Roke Julian Lockhart Beedell 2025-08-07 20:32:43 UTC 
(In reply to Ben Cooksley from comment #2)

I can access it from my smartphone OEM's non-FOSS AOSP distribution, and AI scrapers are well-known to just spoof UAs. Have you considered something like Anubis, per https://discourse.gnome.org/t/anime-girl-on-gnome-gitlab/27689/2?u=rokejulianlockhart? I see it often, nowadays. Am I allowed to spoof my UA to access it?
Comment 4 Ben Cooksley 2025-08-08 09:12:09 UTC 
I'm well aware of UA spoofing, and yes of course AI scrapers do it. Most of them try to be desktop devices on Windows or macOS though thankfully.

Also well aware of Anubis and other alternatives. The way we have Phabricator deployed does not align well with deploying filters like Anubis unfortunately.