Core Rule Set: Drupal's JSON password reset passes (closes #259) #261

Merged
clawbot merged 1 commits from issue-259-drupal-json-password into next 2026-11-10 00:58:08 +01:00
1 Commits
Author SHA1 Message Date
sneak fa87dbed2a Core Rule Set: Drupal's JSON password reset passes (closes #259)
check / check (push) Failing after 4m8s
POST /user/password?_format=json with a name of python3, powershell,
ls -la or .htaccess was refused while bodies are read. On that path,
the JSON field name now skips 930120, 932120, 932250 and 932260, the
four rules those recorded names set off, unless the query has a
json.name parameter. Recorded from Drupal 11.4.11.

Model: opus-5-5
2026-11-09 23:27:21 +00:00