Core Rule Set: more of Drupal's ordinary fields pass (closes #244) #250

Merged
clawbot merged 1 commits from issue-244-drupal-more-fields into next 2026-11-09 23:09:15 +01:00
1 Commits
Author SHA1 Message Date
sneak 91d37d40d3 Core Rule Set: more of Drupal's ordinary fields pass (closes #244)
check / check (push) Failing after 2m59s
Names, searches and the page to return to on more Drupal paths skip
the rules that misfire on them: 930120, 932120, 932250 and 932260,
plus 932230 and 932235 on destination only. An email address skips
930120, 932120 and 932260; the oEmbed url only 930120 and 932120.
Every Drupal path may carry a language prefix such as /fr. Requests
recorded from Drupal 11.4.11 with plain words, python3, powershell,
ls -la and .htaccess are added to the test data; tests show attacks
and "; wget ..." still refused on each new field.

Model: opus-5-5
2026-11-09 21:34:42 +00:00