5 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
sneak	909aca3170	Core Rule Set: Nextcloud's ordinary requests pass by default (closes #240) ... Adds nextcloud.conf, the twelfth change. Nextcloud's WebDAV paths allow PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, REPORT and SEARCH. The account-name cookie nc_username, and the fields that carry a search, a name, a file name or a folder on the sign-in page, the Files app, public shares and the OCS API, skip the four rules that read them as commands or system files. Comments and the text editor's document skip the two rules for a command after a ";" too; 932235 keeps "; wget" refused. Requests recorded from Nextcloud 35.0.2, its web pages, sync client 3.16.7 with chunked uploads and the OCS API, pass at the defaults and while bodies are read. Model: opus-5-5	2026-11-10 04:15:23 +00:00
sneak	c0313f7b27	Coraza: use the commit that keeps exclusions per request (closes #254) ... Coraza v3.8.1 shares a rule's ctl:ruleRemoveTargetById exclusions between concurrent requests, so one request can be checked with another's. Coraza's main fixed it in its pull request 1745; no release carries it yet, so go.mod names commit d028be399c68 by its pseudo-version. Model: opus-5-5	2026-11-09 21:00:08 +00:00
sneak	35dfd1f5e0	Core Rule Set: test concurrent requests keep their own exclusions ... A Drupal and a WordPress request are inspected at once, many times over, on one Core Rule Set. Coraza v3.8.1 shares each rule's exclusions between requests, so the test fails under -race. Model: opus-5-5	2026-11-09 20:59:45 +00:00
sneak	f6435b1a73	Add make publish: build the image on the Docker host and push it to the registry ... `script/publish` runs `script/docker` against the Docker host and pushes the image to the registry under four tags: the UTC date, the short commit hash, the branch name and `latest`. It refuses a working tree with uncommitted changes, since the hash tag names a commit. Also carries sneak's `golines -m 77` line wrapping in three files, with no code change. Unverified: a real build on the Docker host and a real push from this commit. Deviation: sneak's FIXME comments are out, because the linter refuses them; they are #227, #228 and #229. Model: opus-5-5 Co-authored-by: sneak <sneak@sneak.berlin>	2026-11-09 02:03:39 +01:00
sneak	a0d2c21346	Add README, SPEC and tool evaluation, closes #1 ... Initial documents: what smallwebwaf is and why, the proposed feature list, the design spec with the rule file format and the open design questions, and the survey of existing tools. Model: fable-5-1	2026-09-21 07:42:45 +00:00