smallwebwaf

102 Commits 8 Branches 2 Tags

3 Commits

Author	SHA1	Message	Date
sneak	8c5762b44f	Core Rule Set: Drupal's ordinary requests pass by default (closes #236 ) check / check (push) Successful in 6m41s Details Adds drupal.conf, the ninth change: on Drupal's paths, the fields that carry a search, a name, a file name or an address skip the rules that refused ordinary requests there. The recorded requests from Drupal 11.4 pass at the defaults and while bodies are read; SQL injection, path traversal and script injection stay refused on those fields. Model: opus-5-5	2026-11-09 09:16:45 +00:00
sneak	f6435b1a73	Add make publish: build the image on the Docker host and push it to the registry check / check (push) Successful in 3m23s Details `script/publish` runs `script/docker` against the Docker host and pushes the image to the registry under four tags: the UTC date, the short commit hash, the branch name and `latest`. It refuses a working tree with uncommitted changes, since the hash tag names a commit. Also carries sneak's `golines -m 77` line wrapping in three files, with no code change. Unverified: a real build on the Docker host and a real push from this commit. Deviation: sneak's FIXME comments are out, because the linter refuses them; they are #227, #228 and #229. Model: opus-5-5 Co-authored-by: sneak <sneak@sneak.berlin>	2026-11-09 02:03:39 +01:00
sneak	a0d2c21346	Add README, SPEC and tool evaluation, closes #1 Initial documents: what smallwebwaf is and why, the proposed feature list, the design spec with the rule file format and the open design questions, and the survey of existing tools. Model: fable-5-1	2026-09-21 07:42:45 +00:00

Author

SHA1

Message

Date

sneak

8c5762b44f

Core Rule Set: Drupal's ordinary requests pass by default (closes #236 )

check / check (push) Successful in 6m41s

Details

Adds drupal.conf, the ninth change: on Drupal's paths, the fields that
carry a search, a name, a file name or an address skip the rules that
refused ordinary requests there. The recorded requests from Drupal 11.4
pass at the defaults and while bodies are read; SQL injection, path
traversal and script injection stay refused on those fields.

Model: opus-5-5

2026-11-09 09:16:45 +00:00

sneak

f6435b1a73

Add make publish: build the image on the Docker host and push it to the registry

check / check (push) Successful in 3m23s

Details

`script/publish` runs `script/docker` against the Docker host and pushes the image to the registry under four tags: the UTC date, the short commit hash, the branch name and `latest`. It refuses a working tree with uncommitted changes, since the hash tag names a commit.

Also carries sneak's `golines -m 77` line wrapping in three files, with no code change.

Unverified: a real build on the Docker host and a real push from this commit.
Deviation: sneak's FIXME comments are out, because the linter refuses them; they are #227, #228 and #229.

Model: opus-5-5
Co-authored-by: sneak <sneak@sneak.berlin>

2026-11-09 02:03:39 +01:00

sneak

a0d2c21346

Add README, SPEC and tool evaluation, closes #1

Initial documents: what smallwebwaf is and why, the proposed feature list, the design spec with the rule file format and the open design questions, and the survey of existing tools.

Model: fable-5-1

2026-09-21 07:42:45 +00:00