{"action":"opened","issue":{"url":"https://api.github.com/repos/Automattic/jetpack/issues/3588","repository_url":"https://api.github.com/repos/Automattic/jetpack","labels_url":"https://api.github.com/repos/Automattic/jetpack/issues/3588/labels{/name}","comments_url":"https://api.github.com/repos/Automattic/jetpack/issues/3588/comments","events_url":"https://api.github.com/repos/Automattic/jetpack/issues/3588/events","html_url":"https://github.com/Automattic/jetpack/issues/3588","id":143698677,"number":3588,"title":"Comments: posting to wp-comments-post.php without a referer triggers ModSecurity rule","user":{"login":"jeherve","id":426388,"avatar_url":"https://avatars.githubusercontent.com/u/426388?v=3","gravatar_id":"","url":"https://api.github.com/users/jeherve","html_url":"https://github.com/jeherve","followers_url":"https://api.github.com/users/jeherve/followers","following_url":"https://api.github.com/users/jeherve/following{/other_user}","gists_url":"https://api.github.com/users/jeherve/gists{/gist_id}","starred_url":"https://api.github.com/users/jeherve/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeherve/subscriptions","organizations_url":"https://api.github.com/users/jeherve/orgs","repos_url":"https://api.github.com/users/jeherve/repos","events_url":"https://api.github.com/users/jeherve/events{/privacy}","received_events_url":"https://api.github.com/users/jeherve/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Automattic/jetpack/labels/Comments","name":"Comments","color":"006b75"},{"url":"https://api.github.com/repos/Automattic/jetpack/labels/[Type]%20Bug","name":"[Type] Bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/Automattic/jetpack/milestones/40","html_url":"https://github.com/Automattic/jetpack/milestones/3.10","labels_url":"https://api.github.com/repos/Automattic/jetpack/milestones/40/labels","id":1617132,"number":40,"title":"3.10","description":"","creator":{"login":"zinigor","id":374293,"avatar_url":"https://avatars.githubusercontent.com/u/374293?v=3","gravatar_id":"","url":"https://api.github.com/users/zinigor","html_url":"https://github.com/zinigor","followers_url":"https://api.github.com/users/zinigor/followers","following_url":"https://api.github.com/users/zinigor/following{/other_user}","gists_url":"https://api.github.com/users/zinigor/gists{/gist_id}","starred_url":"https://api.github.com/users/zinigor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zinigor/subscriptions","organizations_url":"https://api.github.com/users/zinigor/orgs","repos_url":"https://api.github.com/users/zinigor/repos","events_url":"https://api.github.com/users/zinigor/events{/privacy}","received_events_url":"https://api.github.com/users/zinigor/received_events","type":"User","site_admin":false},"open_issues":52,"closed_issues":4,"state":"open","created_at":"2016-03-02T07:14:54Z","updated_at":"2016-03-26T12:27:26Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2016-03-26T12:27:26Z","updated_at":"2016-03-26T12:27:26Z","closed_at":null,"body":"Some hosting providers include a ModSecurity rule that blocks all requests to `wp-comments-post.php` that do not include a referer:\r\n\r\n```\r\nModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file \"/usr/local/apache/conf/modsec2_rules/modsecurity_05_spam.conf\"] [line \"9\"] [id \"5301\"] [msg \"Comment spam (Wordpress comment with no referer)\"] [severity \"CRITICAL\"] [tag \"SPAM/WORDPRESS\"] [hostname \"www.example.com\"] [uri \"/wp-comments-post.php\"] [unique_id \"unique_id\"]\r\n```\r\n\r\nWe should add a referer, or at least our `Jetpack by WordPress.com` User Agent so hosts can update their rules to avoid catching all comments made through the Comments module.\r\n\r\nReported in 2593463-t"}}