5 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
sneak	81b298c6e4	Core Rule Set tests: inspect requests with no body and no Content-Type once (closes #281) ... wantRecordedRequestsPass inspects a recorded request with neither a body nor a Content-Type header only at the defaults, as the WordPress test does for a request with no body. With neither, the set that reads bodies has nothing more to check: what it adds picks how to read a body from the Content-Type, then reads the body. Every other request is still inspected both ways. This cuts the package's CPU time under -race by about a fifth. Model: opus-5-5	2026-11-10 07:59:26 +00:00
sneak	c0313f7b27	Coraza: use the commit that keeps exclusions per request (closes #254) ... Coraza v3.8.1 shares a rule's ctl:ruleRemoveTargetById exclusions between concurrent requests, so one request can be checked with another's. Coraza's main fixed it in its pull request 1745; no release carries it yet, so go.mod names commit d028be399c68 by its pseudo-version. Model: opus-5-5	2026-11-09 21:00:08 +00:00
sneak	35dfd1f5e0	Core Rule Set: test concurrent requests keep their own exclusions ... A Drupal and a WordPress request are inspected at once, many times over, on one Core Rule Set. Coraza v3.8.1 shares each rule's exclusions between requests, so the test fails under -race. Model: opus-5-5	2026-11-09 20:59:45 +00:00
sneak	f6435b1a73	Add make publish: build the image on the Docker host and push it to the registry ... `script/publish` runs `script/docker` against the Docker host and pushes the image to the registry under four tags: the UTC date, the short commit hash, the branch name and `latest`. It refuses a working tree with uncommitted changes, since the hash tag names a commit. Also carries sneak's `golines -m 77` line wrapping in three files, with no code change. Unverified: a real build on the Docker host and a real push from this commit. Deviation: sneak's FIXME comments are out, because the linter refuses them; they are #227, #228 and #229. Model: opus-5-5 Co-authored-by: sneak <sneak@sneak.berlin>	2026-11-09 02:03:39 +01:00
sneak	a0d2c21346	Add README, SPEC and tool evaluation, closes #1 ... Initial documents: what smallwebwaf is and why, the proposed feature list, the design spec with the rule file format and the open design questions, and the survey of existing tools. Model: fable-5-1	2026-09-21 07:42:45 +00:00