Skip to content

fix: remove Request-Range Header from rules#4435

Merged
Xhoenix merged 1 commit into
coreruleset:mainfrom
Xhoenix:remove-request-range-header
Jan 28, 2026
Merged

fix: remove Request-Range Header from rules#4435
Xhoenix merged 1 commit into
coreruleset:mainfrom
Xhoenix:remove-request-range-header

Conversation

@Xhoenix
Copy link
Copy Markdown
Member

@Xhoenix Xhoenix commented Jan 28, 2026

What

  • Removing Obsolete Request-Range Header

Why

  • The Request-Range header is a legacy/non-standard HTTP header that dates back to Netscape Navigator 2-3 and MSIE 3 (~1996-1997). It was never part of any HTTP RFC and has no legitimate use in modern web traffic.

@github-actions
Copy link
Copy Markdown
Contributor

📊 Quantitative test results for language: eng, year: 2023, size: 10K, paranoia level: 1:
🚀 Quantitative testing did not detect new false positives

@Xhoenix Xhoenix requested a review from fzipi January 28, 2026 13:59
@Xhoenix Xhoenix added this pull request to the merge queue Jan 28, 2026
Merged via the queue into coreruleset:main with commit ad171c2 Jan 28, 2026
8 checks passed
@Xhoenix Xhoenix deleted the remove-request-range-header branch January 28, 2026 14:10
@fzipi fzipi added the release:new-detection In this PR we introduce a new detection label Feb 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release:new-detection In this PR we introduce a new detection

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants