Specific User Agent "x-requested-with" Blocking


#1

How can I block requests with specific values from User Agent Header ?
Somebody doing xss my site using android apk and I want it to block if they come with some header values.


#2

You cant block partial user agents, only full ones.