Coraza: keep exclusions per request (closes #254) #255

Merged

clawbot merged 2 commits from issue-254-coraza-exclusion-race into next

2026-11-09 22:26:13 +01:00

Author	SHA1	Message	Date
sneak	c0313f7b27	Coraza: use the commit that keeps exclusions per request (closes #254 ) check / check (push) Successful in 5m27s Details Coraza v3.8.1 shares a rule's ctl:ruleRemoveTargetById exclusions between concurrent requests, so one request can be checked with another's. Coraza's main fixed it in its pull request 1745; no release carries it yet, so go.mod names commit d028be399c68 by its pseudo-version. Model: opus-5-5	2026-11-09 21:00:08 +00:00
sneak	35dfd1f5e0	Core Rule Set: test concurrent requests keep their own exclusions check / check (push) Failing after 2m41s Details A Drupal and a WordPress request are inspected at once, many times over, on one Core Rule Set. Coraza v3.8.1 shares each rule's exclusions between requests, so the test fails under -race. Model: opus-5-5	2026-11-09 20:59:45 +00:00

Author

SHA1

Message

Date

sneak

c0313f7b27

Coraza: use the commit that keeps exclusions per request (closes #254 )

check / check (push) Successful in 5m27s

Details

Coraza v3.8.1 shares a rule's ctl:ruleRemoveTargetById exclusions
between concurrent requests, so one request can be checked with
another's. Coraza's main fixed it in its pull request 1745; no release
carries it yet, so go.mod names commit d028be399c68 by its
pseudo-version.

Model: opus-5-5

2026-11-09 21:00:08 +00:00

sneak

35dfd1f5e0

Core Rule Set: test concurrent requests keep their own exclusions

check / check (push) Failing after 2m41s

Details

A Drupal and a WordPress request are inspected at once, many times
over, on one Core Rule Set. Coraza v3.8.1 shares each rule's
exclusions between requests, so the test fails under -race.

Model: opus-5-5

2026-11-09 20:59:45 +00:00