smallwebwaf

92 Commits 7 Branches 2 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
clawbot	f8845aaded	Core Rule Set: gitea's ordinary requests pass by default (closes #198 ) check / check (push) Successful in 3m25s Details The eighth change, internal/waf/gitea.conf, has some fields skip the rules that refused ordinary gitea requests there, on gitea's paths only: searches, file names and branch names. Referer skips 944130 too. A registry's layer reuse skips 932260 on from, the seventh change. The new setting SWWAF_CORE_RULE_SET_EXCLUSIONS_FILE loads an operator's own exclusions before the Core Rule Set's rules. The start stops, in every mode, on a set file that cannot be read or does not parse, names smallwebwaf's own ids, or holds a directive such as SecRuleRemoveById. A test sends the recorded gitea requests at the defaults, none refused, and three attacks, all refused. Model: opus-5-5	2026-11-07 04:06:54 +00:00
clawbot	7fed6b6d36	Remove what is about deploying behind Gitea (#210 ) check / check (push) Successful in 3m30s Details	2026-11-07 03:52:02 +01:00
clawbot	a63b7e4d2d	Rename internal/proxy to internal/servewaf (closes #173 ) check / check (push) Successful in 3m44s Details The package passes nothing on since the one-process mode went: it answers rproxy's questions, takes its reports and answers servewaf's own endpoints. It is now named after the command it serves, with `git mv`, and its constructor is `servewaf.New`. `SPEC.md` and the other documents follow. No change of behaviour. Model: opus-5-5	2026-11-06 20:02:17 +01:00

Author

SHA1

Message

Date

clawbot

f8845aaded

Core Rule Set: gitea's ordinary requests pass by default (closes #198 )

check / check (push) Successful in 3m25s

Details

The eighth change, internal/waf/gitea.conf, has some fields skip the
rules that refused ordinary gitea requests there, on gitea's paths only:
searches, file names and branch names. Referer skips 944130 too. A
registry's layer reuse skips 932260 on from, the seventh change.

The new setting SWWAF_CORE_RULE_SET_EXCLUSIONS_FILE loads an operator's
own exclusions before the Core Rule Set's rules. The start stops, in
every mode, on a set file that cannot be read or does not parse, names
smallwebwaf's own ids, or holds a directive such as SecRuleRemoveById.

A test sends the recorded gitea requests at the defaults, none refused,
and three attacks, all refused.

Model: opus-5-5

2026-11-07 04:06:54 +00:00

clawbot

7fed6b6d36

Remove what is about deploying behind Gitea (#210 )

check / check (push) Successful in 3m30s

Details

2026-11-07 03:52:02 +01:00

clawbot

a63b7e4d2d

Rename internal/proxy to internal/servewaf (closes #173 )

check / check (push) Successful in 3m44s

Details

The package passes nothing on since the one-process mode went: it answers rproxy's questions, takes its reports and answers servewaf's own endpoints. It is now named after the command it serves, with `git mv`, and its constructor is `servewaf.New`. `SPEC.md` and the other documents follow. No change of behaviour.

Model: opus-5-5

2026-11-06 20:02:17 +01:00