From 87651f95066dc3f9eeb3e638217db8e1c2468252 Mon Sep 17 00:00:00 2001
From: Elliot Speck <11192354+arcayr@users.noreply.github.com>
Date: Sat, 9 Aug 2025 21:40:33 +1000
Subject: [PATCH] default pattern fixes (#963)

* feat(checker): allow png/gif/jpg/jpeg/svg favicons as well as ico

* changelog: add updates to keep-internet-working.yaml

* fix(checker): tighten default regex patterns for well-known files

* changelog: add updates to regular expression patterns in keep-internet-working.yaml

---------

Signed-off-by: Elliot Speck <11192354+arcayr@users.noreply.github.com>
---
 data/common/keep-internet-working.yaml | 8 ++++----
 docs/docs/CHANGELOG.md                 | 1 +
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/data/common/keep-internet-working.yaml b/data/common/keep-internet-working.yaml
index 68f4756..75d2bda 100644
--- a/data/common/keep-internet-working.yaml
+++ b/data/common/keep-internet-working.yaml
@@ -1,13 +1,13 @@
 # Common "keeping the internet working" routes
 - name: well-known
-  path_regex: ^/.well-known/.*$
+  path_regex: ^/\.well-known/.*$
   action: ALLOW
 - name: favicon
-  path_regex: ^/favicon.(?:ico|png|gif|jpg|jpeg|svg)$
+  path_regex: ^/favicon\.(?:ico|png|gif|jpg|jpeg|svg)$
   action: ALLOW
 - name: robots-txt
-  path_regex: ^/robots.txt$
+  path_regex: ^/robots\.txt$
   action: ALLOW
 - name: sitemap
-  path_regex: ^/sitemap.xml$
+  path_regex: ^/sitemap\.xml$
   action: ALLOW
diff --git a/docs/docs/CHANGELOG.md b/docs/docs/CHANGELOG.md
index aed9bbe..9c09862 100644
--- a/docs/docs/CHANGELOG.md
+++ b/docs/docs/CHANGELOG.md
@@ -33,6 +33,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - A standard library HTTP server log message about HTTP pipelining not working has been filtered out of Anubis' logs. There is no action that can be taken about it.
 - The default `favicon` pattern in `data/common/keep-internet-working.yaml` has been updated to permit requests for png/gif/jpg/svg files as well as ico.
 - The `--cookie-prefix` flag has been fixed so that it is fully respected.
+- The default patterns in `data/common/keep-internet-working.yaml` have been updated to appropriately escape the '.' character in the regular expression patterns.
 
 ### Breaking changes