3 Commits

Include renames

Author	SHA1	Message	Date
sneak	22689ad73e	SWW_APPS: an app's Core Rule Set fixes apply only to the hostnames that serve it (closes #220) ... Each app's fixes are one .conf file and one entry in apps. They apply only while Inspect has set the app's transaction variable, such as tx.app_gitea. SWW_APPS names each hostname's apps. A hostname gets only its apps' fixes; while SWW_APPS is unset, every hostname gets every app's fixes. A hostname in SWW_APPS that is not a DNS name, such as *.example.com, stops the start. Unset, SWW_APPS is logged at start as null; set empty, as "". Model: opus-5-5	2026-11-10 09:29:06 +00:00
clawbot	183a6072d5	Core Rule Set: Mastodon's email field passes ordinary addresses (closes #273) ... user[email] on /auth and the paths under it skips 930120, 932120 and 932260. They refused signing up, signing in and resetting a password with addresses such as python3@example.com, powershell@example.com and jane.profile@example.com. The field keeps 932250 and every other rule. Recorded from Mastodon 4.7.5: sign-up, sign-in, password reset and an email change. Model: opus-5-5	2026-11-10 06:43:23 +01:00
clawbot	20e4b3b080	Core Rule Set: Mastodon's ordinary requests pass by default (closes #238) ... Adds mastodon.conf, the twelfth change. On Mastodon's paths, the fields that carry a search, a name, a title, an address, a password or free text skip the four rules that read them as commands or system files. They cover the API and the web app's JSON, the admin and settings pages, sign-up and sign-in, and the objects other servers deliver to an inbox. A post's text skips 932125, 932230 and 932235 too. Hashtags and sign-up usernames skip only 932120 and 932260. Uploaded file names skip 932180, a report's forward keys skip 930120 by name, and the Accept header of a link lookup skips 920600 on profile and post links. The requests recorded from Mastodon 4.7.5 pass at the defaults and while bodies are read. Model: opus-5-5	2026-11-10 05:43:18 +01:00