From 80e45ab01681fce6681bc0dde4ea4dad417b02bd Mon Sep 17 00:00:00 2001
From: Pierre Tachoire <pierre@lightpanda.io>
Date: Fri, 14 Aug 2026 12:26:33 +0200
Subject: [PATCH] apply user-agent validation rules on request intercepted

---
 src/network/HttpClient.zig | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/network/HttpClient.zig b/src/network/HttpClient.zig
index 1b3e02033..c61778627 100644
--- a/src/network/HttpClient.zig
+++ b/src/network/HttpClient.zig
@@ -24,6 +24,7 @@ const ArenaPool = @import("../ArenaPool.zig");
 const Notification = @import("../Notification.zig");
 
 const CDP = @import("../cdp/CDP.zig");
+const Config = @import("../Config.zig");
 const Watchdog = @import("../Watchdog.zig");
 const URL = @import("../browser/URL.zig");
 const referrer = @import("../browser/referrer.zig");
@@ -2804,6 +2805,12 @@ pub const Transfer = struct {
         self.req_headers.clearRetainingCapacity();
         try self.seedHeaders();
         for (headers) |hdr| {
+            if (std.ascii.eqlIgnoreCase(hdr.name, "user-agent")) {
+                Config.validateUserAgent(hdr.value) catch |err| {
+                    log.info(.http, "ignored request header", .{ .intercepted = self.client.intercepted, .name = hdr.name, .err = err });
+                    continue;
+                };
+            }
             try self.setHeader(hdr.name, hdr.value, .{});
         }
     }