Bot Cop

• The x00–x15 blocked paths now only match hex escapes (\x00–\x15). A 404 on an ordinary file with dimensions in its name, like hero-1920x1080.jpg or the apple-touch-icon-120x120.png iPhones request on their own, no longer bans the visitor.
• Blocked paths are also checked against the URL-decoded path, so %5Cx00 and %2Eenv match.
• If you published the config, add the backslash to the x00–x15 entries.

#14

What's Changed

• Add Statamic 6 support by @sheldonkotyk in https://github.com/abigah/bot-cop/pull/12

Full Changelog: https://github.com/abigah/bot-cop/compare/0.7.0...0.8

POTENTIAL BREAKING CHANGE: Remove bot-cop.php from your config folder to get the latest variables or republish and merge the changes.

• [ new] AllowedIPs are now able to be added in the .env
• New AllowedPaths are also able to be added to the .env
• New BlockedPaths are now able to be added in the .env

• Fix Rate-limiting code was wrong.

• Fix Livewire polling default was setting off the bot-cop rate-limiter when set at default.

With it running in production on dozens of sites with different configurations we're ready to remove the big warning. We're still calling it pre-1.0 though as it will be getting a number of tagged releases over the next few weeks as we add new features (and testing.)