smallwebwaf

83 Commits 6 Branches 2 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
sneak	1b949fddc6	Rename internal/proxy to internal/servewaf (closes #173 ) check / check (push) Waiting to run Details The package passes nothing to an app since rproxy took that over, so it is named after the command it serves. Its constructor is New, like rproxy's. The rproxy tests call their stand-in for servewaf standIn, since a local servewaf would hide the package. No change of behaviour. Model: opus-5-5	2026-11-06 18:29:22 +00:00
clawbot	8632da556a	rproxy tests give a loaded host time before their limits run out (closes #185 ) (#186 ) check / check (push) Successful in 6m15s Details	2026-11-05 23:17:16 +01:00
clawbot	17c5dd2438	rproxy, the proxy in front of each app, asks servewaf and fails open (closes #171 ) check / check (push) Successful in 7m25s Details `smallwebwaf rproxy` reads the first 64 KiB of each body, asks servewaf over HTTP/1.1, and passes what servewaf allows to the app within its limits. Any other answer goes to the visitor as servewaf gave it. SWRP_DEFAULT_DISPOSITION decides only when servewaf cannot be connected to, does not answer at all, or does not answer within SWRP_TIMEOUT_MS. A method SPEC.md does not list gets 405. Duplication: internal/rproxy copies passing-on code from internal/proxy until #172 removes the originals. Rule suppressed: gosec G704 and G705; gosec at internal/smallwebwaf/rproxy_test.go:431; tagliatelle at internal/requestlog/requestlog.go:203; paralleltest on one test. Judgement call: an answer over 1 MiB, or with a status below 200, gets 502. Judgement call: every target not starting with one / gets 400. Model: opus-5-5	2026-11-05 06:32:08 +01:00

Author

SHA1

Message

Date

sneak

1b949fddc6

Rename internal/proxy to internal/servewaf (closes #173 )

check / check (push) Waiting to run

Details

The package passes nothing to an app since rproxy took that over, so it
is named after the command it serves. Its constructor is New, like
rproxy's. The rproxy tests call their stand-in for servewaf standIn,
since a local servewaf would hide the package. No change of behaviour.

Model: opus-5-5

2026-11-06 18:29:22 +00:00

clawbot

8632da556a

rproxy tests give a loaded host time before their limits run out (closes #185 ) (#186 )

check / check (push) Successful in 6m15s

Details

2026-11-05 23:17:16 +01:00

clawbot

17c5dd2438

rproxy, the proxy in front of each app, asks servewaf and fails open (closes #171 )

check / check (push) Successful in 7m25s

Details

`smallwebwaf rproxy` reads the first 64 KiB of each body, asks servewaf over
HTTP/1.1, and passes what servewaf allows to the app within its limits. Any
other answer goes to the visitor as servewaf gave it. SWRP_DEFAULT_DISPOSITION
decides only when servewaf cannot be connected to, does not answer at all, or
does not answer within SWRP_TIMEOUT_MS. A method SPEC.md does not list gets 405.

Duplication: internal/rproxy copies passing-on code from internal/proxy until
#172 removes the originals.
Rule suppressed: gosec G704 and G705; gosec at
internal/smallwebwaf/rproxy_test.go:431; tagliatelle at
internal/requestlog/requestlog.go:203; paralleltest on one test.
Judgement call: an answer over 1 MiB, or with a status below 200, gets 502.
Judgement call: every target not starting with one / gets 400.

Model: opus-5-5

2026-11-05 06:32:08 +01:00