Skip to content

Memories android app emits inconsistent useragent headers #1455

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ugjka opened this issue May 20, 2025 · 0 comments
Open

Memories android app emits inconsistent useragent headers #1455

ugjka opened this issue May 20, 2025 · 0 comments
Labels
needs triage To be triaged

Comments

@ugjka
Copy link

ugjka commented May 20, 2025

Describe the bug

Memories android app emits inconsistent useragent headers, complicating things like Anubis allow rules

Steps To Reproduce

  1. tcpdump your nextcloud server to pcap file
  2. launch the android app without cache
  3. Observe in pcap with wireshark that different requests originating from the app have various useragent headers

Platform

- OS: Linux 6.14.6-arch1-1 x86_64
- Browser: Memories android app v1.12
- Memories Version: 7.5.2
- Nextcloud Version:31.0.5
- PHP Version:	8.2.28

Screenshots

No response

Additional context

GET /index.php/apps/memories/api/describe HTTP/1.1
Host: ******
User-Agent: Memories
POST /login/v2/poll HTTP/1.1
Host: ******
User-Agent: okhttp/4.12.0
GET /apps/memories/nxsetup HTTP/1.1
Host: *****
User-Agent: MemoriesNative/1.12 Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.76 Mobile Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-IE,en;q=0.9,lv-LV;q=0.8,lv;q=0.7,en-GB;q=0.6,en-US;q=0.5
Authorization: Basic ***
Cookie: nx_auth=Basic ***
Priority: u=0, i
Sec-Ch-Ua: "Chromium";v="136", "Android WebView";v="136", "Not.A/Brand";v="99"
Sec-Ch-Ua-Mobile: ?1
Sec-Ch-Ua-Platform: "Android"
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Upgrade-Insecure-Requests: 1
GET /apps/memories/static/service-worker.js HTTP/1.1
Host: *****
User-Agent: Mozilla/5.0 (Linux; Android 14; SM-A546B Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/136.0.7103.60 Mobile Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-IE,en;q=0.9,lv-LV;q=0.8,lv;q=0.7,en-GB;q=0.6,en-US;q=0.5
Cache-Control: max-age=0
Cookie: nx_auth=Basic ***oc_sessionPassphrase=****; ocd0voamzc8k=1vg9bca1eopliaardeddlu19ep; __Host-nc_sameSiteCookielax=true; __Host-nc_sameSiteCookiestrict=true
Priority: u=4, i
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Service-Worker: script
X-Requested-With: gallery.memories
@ugjka ugjka added the needs triage To be triaged label May 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs triage To be triaged
Projects
None yet
Development

No branches or pull requests

1 participant