Remix behind web app firewall #10302

gregleeper · 2024-12-04T15:47:12Z

gregleeper
Dec 4, 2024

I have a remix app that sits behind a WAF. Sometimes a request gets rejected by the WAF. I've recently updated Remix to 2.13.1. I'm rendering my ErrorBoundary like so:

export function GeneralErrorBoundary({
    defaultStatusHandler = ({ error }) => (
        <p>
            {error.status} {error.data}
        </p>
    ),
    statusHandlers,
    unexpectedErrorHandler = error => <p>{getErrorMessage(error)}</p>,
}: {
    defaultStatusHandler?: StatusHandler
    statusHandlers?: Record<number, StatusHandler>
    unexpectedErrorHandler?: (error: unknown) => JSX.Element | null
}) {
    const error = useRouteError()
    const params = useParams()

    if (typeof document !== 'undefined') {
        console.error(error)
    }

    return (
        <div className="container flex items-center justify-center p-20 text-h2">
            {isRouteErrorResponse(error)
                ? (statusHandlers?.[error.status] ?? defaultStatusHandler)({
                    error,
                    params,
                })
                : unexpectedErrorHandler(error)}
        </div>
    )
}

The response from the WAF is this on a 400 Bad Request:

<html>
    <head>
        <title>Request Rejected</title>
    </head>
    <body>
        The requested URL was rejected. Please consult with the campus you are trying to register with.<br>
        <br>
        Your support ID is: 16803465346296381362<br>
        <br>
        <a href='javascript:history.back();'>[Go Back]</a>
    </body>
</html>

Before the update to 2..13.1 and turbo-stream my users would see the html returned from the WAF. But now they are seeing a message like this:

Unable to decode turbo-stream response from URL: .....

Any ideas on how I can get past this message from turbo-stream?

akomm · 2024-12-09T10:22:59Z

akomm
Dec 9, 2024

Do you fetch in your loader? The ErrorBoundary isn't helpful here.

1 reply

gregleeper Dec 19, 2024
Author

No, this happens on a POST request via Form action in the client. The request never makes it to my backend because it's intercepted by the firewall, rejected, and returned to the client without any making to the server at all. The POST requests work fine if the firewall accepts the data and passes it along.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Remix behind web app firewall #10302

{{title}}

Replies: 1 comment 1 reply

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Select a reply

Remix behind web app firewall #10302

gregleeper Dec 4, 2024

Replies: 1 comment · 1 reply

akomm Dec 9, 2024

gregleeper Dec 19, 2024 Author

gregleeper
Dec 4, 2024

Replies: 1 comment 1 reply

akomm
Dec 9, 2024

gregleeper Dec 19, 2024
Author