Document Details

Origin Security
Home / Scan #2 / Origin Security
Sad Tux - Windows bias detected
This page contains Windows bias

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
GitHub View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types
windows_first
windows_tools
Summary
The documentation provides configuration examples for multiple origin types, but the IIS (Windows) example is presented before the AKS NGINX (Linux) example. Additionally, the IIS example is detailed and uses Windows-specific configuration (web.config), while there is no equivalent example for generic Linux web servers (e.g., Apache, NGINX outside AKS). This ordering and tool selection may suggest a slight Windows bias.
Recommendations
  • Reorder the example sections so that Linux-based origins (e.g., AKS NGINX, generic NGINX, Apache) are presented before or alongside Windows/IIS examples.
  • Add configuration examples for common Linux web servers such as Apache and standalone NGINX (not just AKS ingress), showing how to filter the X-Azure-FDID header.
  • Ensure that for every Windows-specific example, there is a Linux equivalent, and that both are equally detailed.
  • Explicitly mention cross-platform applicability and provide links or references to Linux documentation where relevant.
GitHub Create Pull Request

Scan History

Date Scan Status Result
2026-01-14 00:00 #250 in_progress Biased Biased
2026-01-13 00:00 #246 completed Biased Biased
2026-01-11 00:00 #240 completed Biased Biased
2026-01-10 00:00 #237 completed Biased Biased
2026-01-09 00:34 #234 completed Biased Biased
2026-01-08 00:53 #231 completed Biased Biased
2026-01-06 18:15 #225 cancelled Clean Clean
2025-09-05 00:00 #102 completed Clean Clean
2025-08-17 00:01 #83 cancelled Clean Clean
2025-07-13 21:37 #48 completed Biased Biased
2025-07-09 13:09 #3 cancelled Clean Clean
2025-07-08 04:23 #2 cancelled Biased Biased

Flagged Code Snippets

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <system.webServer>
    <rewrite>
      <rules>
        <rule name="Filter_X-Azure-FDID" patternSyntax="Wildcard" stopProcessing="true">
          <match url="*" />
          <conditions>
            <add input="{HTTP_X_AZURE_FDID}" pattern="xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" negate="true" />
          </conditions>
          <action type="AbortRequest" />
        </rule>
      </rules>
    </rewrite>
  </system.webServer>
</configuration>