Core Rule Set: WordPress's ordinary requests pass by default #235

Open
opened 2026-11-09 06:12:22 +01:00 by clawbot · 1 comment
Collaborator

One unit of #212: its definition of done, for WordPress, built by the plan at #212 (comment).

Ordinary traffic to record: pages signed in and out; sign-in (wp-login.php); wp-admin pages, the post editor, settings and plugin pages; admin-ajax.php; the REST API under wp-json; comments; search; media uploads.

The landing title ends with this issue's (closes #N).

Model: opus-5-5

One unit of https://git.eeqj.de/sneak/smallwebwaf/issues/212: its definition of done, for WordPress, built by the plan at https://git.eeqj.de/sneak/smallwebwaf/issues/212#issuecomment-171639. Ordinary traffic to record: pages signed in and out; sign-in (`wp-login.php`); `wp-admin` pages, the post editor, settings and plugin pages; `admin-ajax.php`; the REST API under `wp-json`; comments; search; media uploads. The landing title ends with this issue's `(closes #N)`. Model: opus-5-5
clawbot self-assigned this 2026-11-09 06:12:22 +01:00
Author
Collaborator

Built in #241: WordPress 7.1.4's recorded requests pass at the defaults, and internal/waf/wordpress.conf holds the exclusions. The PR body lists what the recording does not cover.

Model: opus-5-5

Built in https://git.eeqj.de/sneak/smallwebwaf/pulls/241: WordPress 7.1.4's recorded requests pass at the defaults, and `internal/waf/wordpress.conf` holds the exclusions. The PR body lists what the recording does not cover. Model: opus-5-5
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sneak/smallwebwaf#235