[GH-ISSUE #839] Issue with blocking URLs with "?" in Pangolin #1662

Open
opened 2026-04-16 08:23:47 -05:00 by GiteaMirror · 1 comment
Owner

Originally created by @rudoma on GitHub (Jun 4, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/839

Hi everyone,

First of all, thanks for the great work on Pangolin — I’m new to the project and really enjoying it so far!

Today I tried to add a rule to block specific login URLs for my self-hosted services, starting with Audiobookshelf. I’d like to block all requests to:

/audiobookshelf/login/?autoLaunch=0

This URL allows bypassing the automatic redirect to the OAuth provider, which I neither want nor need. I’d like to prevent direct access via this query parameter.

I encountered the same issue with Immich:

/auth/login?autoLaunch=0

Unfortunately, I couldn’t get it to work — even when trying with wildcards.
Is there a recommended way to block requests with specific query parameters like this in Pangolin?

Thanks in advance for your help!

Originally created by @rudoma on GitHub (Jun 4, 2025). Original GitHub issue: https://github.com/fosrl/pangolin/issues/839 Hi everyone, First of all, thanks for the great work on Pangolin — I’m new to the project and really enjoying it so far! Today I tried to add a rule to block specific login URLs for my self-hosted services, starting with Audiobookshelf. I’d like to block all requests to: /audiobookshelf/login/?autoLaunch=0 This URL allows bypassing the automatic redirect to the OAuth provider, which I neither want nor need. I’d like to prevent direct access via this query parameter. I encountered the same issue with Immich: /auth/login?autoLaunch=0 Unfortunately, I couldn’t get it to work — even when trying with wildcards. Is there a recommended way to block requests with specific query parameters like this in Pangolin? Thanks in advance for your help!
GiteaMirror added the needs investigating label 2026-04-16 08:23:47 -05:00
Author
Owner

@seamon67 commented on GitHub (Jun 5, 2025):

I believe that's because everything after ? is a token or parameter rather than being part of the URL itself.
I think parameter support for URLs would be great!

<!-- gh-comment-id:2942982682 --> @seamon67 commented on GitHub (Jun 5, 2025): I believe that's because everything after ? is a token or parameter rather than being part of the URL itself. I think parameter support for URLs would be great!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#1662