From 49ba5f3d35f3eaff46abf3f2843d58e2b9bf3955 Mon Sep 17 00:00:00 2001
From: Alexandre Rossi <alexandre.rossi@gmail.com>
Date: Thu, 16 Jul 2026 11:37:27 +0200
Subject: [PATCH] prevent mod_proxy directives from bypassing challenge

---
 apache/botcheck.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apache/botcheck.conf b/apache/botcheck.conf
index 3fccd28..fd6a714 100644
--- a/apache/botcheck.conf
+++ b/apache/botcheck.conf
@@ -57,4 +57,7 @@
     # Return 402 status and the botcheck page if none of the conditions are met
     RewriteCond %{ENV:BOTCHECK} !^OK$
     RewriteRule .* - [L,R=402]
+
+    # Prevent ProxyPass if none of the conditions are met
+    SetEnvIf BOTCHECK !^OK$ no-proxy
 </IfDefine>