smallwebwaf

106 Commits 8 Branches 2 Tags

3 Commits

Author	SHA1	Message	Date
sneak	c31a26ca62	Core Rule Set: MediaWiki's ordinary requests pass by default (closes #237 ) check / check (push) Failing after 4m55s Details Adds mediawiki.conf, the eleventh change: on MediaWiki's paths, the fields that carry a search, a title, a name, a file name or an address skip the four rules that read them as commands or system files, and the wikitext fields skip the rules that refused saving a page. /index.php counts as MediaWiki's only with a page title in its query or after its path, since WordPress serves it too. The requests recorded from MediaWiki 1.46.2, with and without short URLs, pass at the defaults and while bodies are read. The app tests share the check of recorded requests and the list of hard values. Model: opus-5-5	2026-11-09 21:17:57 +00:00
sneak	f6435b1a73	Add make publish: build the image on the Docker host and push it to the registry check / check (push) Successful in 3m23s Details `script/publish` runs `script/docker` against the Docker host and pushes the image to the registry under four tags: the UTC date, the short commit hash, the branch name and `latest`. It refuses a working tree with uncommitted changes, since the hash tag names a commit. Also carries sneak's `golines -m 77` line wrapping in three files, with no code change. Unverified: a real build on the Docker host and a real push from this commit. Deviation: sneak's FIXME comments are out, because the linter refuses them; they are #227, #228 and #229. Model: opus-5-5 Co-authored-by: sneak <sneak@sneak.berlin>	2026-11-09 02:03:39 +01:00
sneak	a0d2c21346	Add README, SPEC and tool evaluation, closes #1 Initial documents: what smallwebwaf is and why, the proposed feature list, the design spec with the rule file format and the open design questions, and the survey of existing tools. Model: fable-5-1	2026-09-21 07:42:45 +00:00

Author

SHA1

Message

Date

sneak

c31a26ca62

Core Rule Set: MediaWiki's ordinary requests pass by default (closes #237 )

check / check (push) Failing after 4m55s

Details

Adds mediawiki.conf, the eleventh change: on MediaWiki's paths, the fields
that carry a search, a title, a name, a file name or an address skip the
four rules that read them as commands or system files, and the wikitext
fields skip the rules that refused saving a page. /index.php counts as
MediaWiki's only with a page title in its query or after its path, since
WordPress serves it too. The requests recorded from MediaWiki 1.46.2, with
and without short URLs, pass at the defaults and while bodies are read. The
app tests share the check of recorded requests and the list of hard values.

Model: opus-5-5

2026-11-09 21:17:57 +00:00

sneak

f6435b1a73

Add make publish: build the image on the Docker host and push it to the registry

check / check (push) Successful in 3m23s

Details

`script/publish` runs `script/docker` against the Docker host and pushes the image to the registry under four tags: the UTC date, the short commit hash, the branch name and `latest`. It refuses a working tree with uncommitted changes, since the hash tag names a commit.

Also carries sneak's `golines -m 77` line wrapping in three files, with no code change.

Unverified: a real build on the Docker host and a real push from this commit.
Deviation: sneak's FIXME comments are out, because the linter refuses them; they are #227, #228 and #229.

Model: opus-5-5
Co-authored-by: sneak <sneak@sneak.berlin>

2026-11-09 02:03:39 +01:00

sneak

a0d2c21346

Add README, SPEC and tool evaluation, closes #1

Initial documents: what smallwebwaf is and why, the proposed feature list, the design spec with the rule file format and the open design questions, and the survey of existing tools.

Model: fable-5-1

2026-09-21 07:42:45 +00:00