search (closes #270) #272

Merged

clawbot merged 1 commits from issue-270-referer-api-exclusion into next

2026-11-10 04:26:09 +01:00

Author	SHA1	Message	Date
sneak	7f1b0a14b4	Core Rule Set: gitea's search Referer exclusion skips /api/v2/search (closes #270 ) check / check (push) Failing after 6m11s Details Rule 900601 let Referer skip five rules when it named a repository's search, issues or pull requests with the owner api, such as /api/v2/search, Mastodon's search. A page opened from there skipped script and SQL injection checks on Referer. gitea has no owner named api, so a chained condition now leaves out those paths, as rule 900600 does. Model: opus-5-5	2026-11-10 03:00:27 +00:00

Author

SHA1

Message

Date

sneak

7f1b0a14b4

Core Rule Set: gitea's search Referer exclusion skips /api/v2/search (closes #270 )

check / check (push) Failing after 6m11s

Details

Rule 900601 let Referer skip five rules when it named a repository's
search, issues or pull requests with the owner api, such as
/api/v2/search, Mastodon's search. A page opened from there skipped
script and SQL injection checks on Referer. gitea has no owner named
api, so a chained condition now leaves out those paths, as rule 900600
does.

Model: opus-5-5

2026-11-10 03:00:27 +00:00