bneradt opened a new pull request, #12811:
URL: https://github.com/apache/trafficserver/pull/12811

   Problem:
   When --preserve was enabled and a request passed through multiple proxies, 
each header was checked individually. This could result in mismatched 
fingerprint data - for example, x-ja3-raw being added by a downstream proxy 
while x-ja3-sig was preserved from an upstream proxy.
   
   Solution:
   The JA3 and JA4 fingerprint plugins now check if ANY header in a fingerprint 
group exists before adding headers. If any header in the group exists, ALL 
headers in that group are skipped.
   
   Changes:
   - ja3_fingerprint: Added group-level checks for JA3 headers
   - ja4_fingerprint: Added --preserve option and group-level check for JA4 
headers
   - Updated tests to verify group-level preserve behavior


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to