Question

用户代理在连接内发生更改，特别是在POST和GET请求之间有所不同。

为什么会这样，为什么会需要这种功能？
这怎么可能？

我真的很好奇为什么会这样。

这与某些日志事件有关，在这些事件中，用户代理“ IEXPORE”被检测为恶意用户代理。

请注意，我对它有点模糊。

POST /Citrix/StoreWeb/Resources/GetLaunchStatus/reafasdgsfgewsdfvxgrhgqer24t2g42HTTP/1.1
 Accept: application/json, text/javascript, */*; q=0.01
 Content-Type: application/x-www-form-urlencoded; charset=UTF-8
 Csrf-Token: 092590F290A09259E
 X-Citrix-IsUsingHTTPS: No
 X-Requested-With: XMLHttpRequest
 Referer: http://FOO.BAR.FOO/RR/AA/
 Accept-Language: en-GB
 Accept-Encoding: gzip, deflate
 User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; wbx 1.0.0)
 Host: FOO.BAR
 Content-Length: 63
 Connection: Keep-Alive
 Cache-Control: no-cache
 Cookie: CtxsDeviceId=WR_Iiy9IeygDn1K3ZONz; 
----content-------

 HTTP/1.1 200 OK
 Cache-Control: no-cache, no-store
 Pragma: no-cache
 Content-Type: application/json
 Content-Encoding: gzip
 Expires: -1
 Server: Microsoft-IIS/8.5
 X-Powered-By: ASP.NET
 X-Citrix-Application: Receiver for Web
 Date: Thu, 27 Jun 2019 08:09:51 GMT
 Content-Length: 60
 ----content----


 GET /Citrix/StoreWeb/Resources/LaunchIca/RKGAGYIGDXZID7894OWHIDSHS09ZCHFOADH094WFASFD?CsrfToken=04598F09A797E907AB07&IsUsingHttps=No HTTP/1.1
 User-Agent: IEXPLORE.EXE
 Host: FOO.BAR
 Cache-Control: no-cache
 Cookie: CtxsDeviceId=WR_Iiy9IeygDn1K3ZONz; CsrfToken=08608695765F870A09B90; CtxsPluginAssistantState=Done; CtxsAuthId=71973EA908B098F; CtxsPasswordChangeAllowed=true; CtxsDesktopAutoLaunchDone=yes; SITESERVER=MyhyIHUHiiyg7898HiugUG79hGIGo*; _ga=GA1.7.170929662.19346432; ASP.NET_SessionId=tnshshfshjjst

用户代理在连接期间更改

0 个答案: