Go-away – Customizable, conditional challenges to incoming requests
21 days ago
- #web-security
- #challenges
- #operators
- Operators can serve challenges to incoming requests based on conditions or rules.
- Challenges can be transparent, non-JavaScript, or custom JavaScript.
- Transparent challenges verify requests against a backend without user interaction.
- Non-JavaScript challenges include cookie checks and resource loading.
- Custom JavaScript challenges involve Proof of Work or WASM runtimes.
- Examples include HTTP cookie checks, DNSBL queries, and JavaScript-based challenges.
- WASM runtime modules require specific exported functions for custom challenges.