Ajax behaviour

Something we're trying is blocking GET requests, which bots use, but allowing POST requests, which AJAX uses. This might allow AJAX to continue working while blocking bots.

You know, I kind of assumed that's what

!$requestEvent->isMainRequest()

Was doing in the event subscriber, but I should confess, I didn't know exactly what was included in that. I'm happy to adjust if needed.

Apologies for the delay in responding. I've been a bit swamped and doing some traveling lately. I'd appreciate any patches if you have that available.

I took a stab in the dark at a fix.

As for main vs sub requests, if I'm reading this right it applies to calls made from the PHP application, not sure it would apply for AJAX calls.

https://www.slingacademy.com/article/handling-sub-requests-in-symfony-a-...