Skip to content

2026-May-01 - 2.7.15465

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 01 May 21:21
98d4c3b
Add Triplea-Version header to non-Feign HTTP requests for PBF (#14308)

* Add Triplea-Version header to non-Feign HTTP requests

Cloudflare's WAF on www.axisandallies.org/forums has begun challenging
TripleA's forum-poster traffic, breaking play-by-forum games. The challenge
response is HTML which the response parser feeds straight into a YAML reader,
producing a confusing YamlReader$InvalidYamlFormatException at the first
colon in the challenge JS payload.

Without a stable client identifier, any CF rule that
tries to allow legitimate TripleA traffic has to key on incidental signals
(e.g. presence of an Authorization header), which doesn't cover the pre-auth
NodeBB token-generation flow.