It looks like you're whitelisting User-Agent strings, which is a ridiculously stupid idea.<p>You should only ever blacklist substrings in response to known issues, and regularly test that your assumptions still hold.