Core Rule Set: WordPress multisite's network profile page refuses random passwords #300

Closed
opened 2026-11-10 19:43:30 +01:00 by clawbot · 2 comments
Collaborator

Follow-up to #294, under #212, from its rework (#294 (comment)): /wp-admin/network/profile.php, the profile page of a WordPress multisite install's network dashboard, posts pass1 and pass2 to itself and has no exclusion, so random passwords are refused there. Start after that PR lands.

Definition of done, one PR into next:

  • The rule that lets pass1 and pass2 skip the random-password rules on WordPress's other profile pages also covers /wp-admin/network/profile.php.
  • TestWordPressPasswordFieldsPass sends both fields there, TestPasswordExclusionsAreNarrow keeps passing, and SPEC.md names the path.
  • make fmt, then flock -w 1800 /srv/code/tmp/.gate-smallwebwaf.lock make check passes. Label the PR needs-review.

Model: opus-5-5

Follow-up to https://git.eeqj.de/sneak/smallwebwaf/pulls/294, under https://git.eeqj.de/sneak/smallwebwaf/issues/212, from its rework (https://git.eeqj.de/sneak/smallwebwaf/pulls/294#issuecomment-174675): `/wp-admin/network/profile.php`, the profile page of a WordPress multisite install's network dashboard, posts `pass1` and `pass2` to itself and has no exclusion, so random passwords are refused there. Start after that PR lands. **Definition of done**, one PR into `next`: - The rule that lets `pass1` and `pass2` skip the random-password rules on WordPress's other profile pages also covers `/wp-admin/network/profile.php`. - `TestWordPressPasswordFieldsPass` sends both fields there, `TestPasswordExclusionsAreNarrow` keeps passing, and `SPEC.md` names the path. - `make fmt`, then `flock -w 1800 /srv/code/tmp/.gate-smallwebwaf.lock make check` passes. Label the PR `needs-review`. Model: opus-5-5
clawbot self-assigned this 2026-11-10 19:43:30 +01:00
Author
Collaborator

Plan. #294 has landed. Change wordpress.conf, TestWordPressPasswordFieldsPass and SPEC.md only, as the definition of done says; keep TestPasswordExclusionsAreNarrow passing. Follow AGENTS.md: checks only through make targets. make fmt, then flock -w 1800 /srv/code/tmp/.gate-smallwebwaf.lock make check; a flock timeout also exits 1, so read the output. Title ending (closes #300).

Model: opus-5-5

**Plan.** https://git.eeqj.de/sneak/smallwebwaf/pulls/294 has landed. Change `wordpress.conf`, `TestWordPressPasswordFieldsPass` and `SPEC.md` only, as the definition of done says; keep `TestPasswordExclusionsAreNarrow` passing. Follow `AGENTS.md`: checks only through `make` targets. `make fmt`, then `flock -w 1800 /srv/code/tmp/.gate-smallwebwaf.lock make check`; a `flock` timeout also exits 1, so read the output. Title ending ` (closes #300)`. Model: opus-5-5
Author
Collaborator

Built in #301: the pass1/pass2 exclusion in wordpress.conf now names /wp-admin/network/profile.php, with a test case and the path added to SPEC.md.

Model: opus-5-5

Built in https://git.eeqj.de/sneak/smallwebwaf/pulls/301: the `pass1`/`pass2` exclusion in `wordpress.conf` now names `/wp-admin/network/profile.php`, with a test case and the path added to `SPEC.md`. Model: opus-5-5
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sneak/smallwebwaf#300