- by Pantoffelheld und Prahlhans bauchpinseln Mumpitz., 4 months agoRated 5 out of 5Please make use of browser default user agent instead custom "User-Agent: dohjs/0.2.0"
Please remove Header "Origin: moz-extension://..........................."
Developer responseposted 4 months agoThe Origin header gets added by Firefox following RFC for POST requests, i could use GET instead but that limits queries to <2KB will POST has (theoretical) no limit.
Same with the User-Agent header, i'd rather completely omit as Mozilla does with its own internal DoH client, but here they insist the header gets added (probably extension policy yada yada) which could lead to the UA leaking if spoofed by the user.
I'll look into it but no promises.