[ https://issues.jboss.org/browse/WFLY-705?page=com.atlassian.jira.plugin.s... ] Andre Dietisheim edited comment on WFLY-705 at 12/13/13 11:54 AM: ------------------------------------------------------------------ Stuard Douglas updated the handler in undertow to a more generic form that allows you to do some regex-acl against ANY request header. Personnally this very much matches my gusto. I saw some behaviour I'm not sure about though: The handler would check the request header attribute for being null. If it is, it would disallow. I'm wondering if it's not also possible that a non-existing user-agent is considered valid. updated PR: https://github.com/undertow-io/undertow/pull/148 was (Author: adietish): Stuard Douglas updated the handler in undertow to a more generic form that allows you to do some regex-acl against ANY request header. Personnally this very much matches my gusto. I saw some behaviour I'm not sure about though: The handler would check the request header attribute for being null. If it is, it would disallow. I'm wondering if it's not also possible that a non-existing user-agent is considered valid. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira