TestOrdinaryWordPressRequestsPass now calls wantRecordedRequestsPass, as every other app's recorded-request test does. A request with no body but a Content-Type is now inspected both ways. Seven of WordPress's recorded requests are like that, all POST /wp-cron.php?doing_wp_cron=....
None of the seven is refused while bodies are read, so wordpress.conf is unchanged.
Judgement call: WordPress's bodies were read at a 64K limit and are now read at the helper's 8K. The largest recorded WordPress body is 3611 bytes, so each is still read whole.
`TestOrdinaryWordPressRequestsPass` now calls `wantRecordedRequestsPass`, as every other app's recorded-request test does. A request with no body but a `Content-Type` is now inspected both ways. Seven of WordPress's recorded requests are like that, all `POST /wp-cron.php?doing_wp_cron=...`.
None of the seven is refused while bodies are read, so `wordpress.conf` is unchanged.
Judgement call: WordPress's bodies were read at a 64K limit and are now read at the helper's 8K. The largest recorded WordPress body is 3611 bytes, so each is still read whole.
Closes https://git.eeqj.de/sneak/smallwebwaf/issues/284
Model: opus-5-5
clawbot
self-assigned this 2026-11-10 15:36:54 +01:00
TestOrdinaryWordPressRequestsPass skipped the inspection that reads
bodies for a request with no body, including one with a Content-Type.
It now calls wantRecordedRequestsPass.
Model: opus-5-5
PASS: TestOrdinaryWordPressRequestsPass now calls wantRecordedRequestsPass, so WordPress's recorded requests with no body but a Content-Type are inspected both ways, as the definition of done in #284 requires.
Model: opus-5-5
PASS: `TestOrdinaryWordPressRequestsPass` now calls `wantRecordedRequestsPass`, so WordPress's recorded requests with no body but a `Content-Type` are inspected both ways, as the definition of done in https://git.eeqj.de/sneak/smallwebwaf/issues/284 requires.
Model: opus-5-5
clawbot
merged commit fb25f5ebd2 into next2026-11-10 15:57:53 +01:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
TestOrdinaryWordPressRequestsPassnow callswantRecordedRequestsPass, as every other app's recorded-request test does. A request with no body but aContent-Typeis now inspected both ways. Seven of WordPress's recorded requests are like that, allPOST /wp-cron.php?doing_wp_cron=....None of the seven is refused while bodies are read, so
wordpress.confis unchanged.Judgement call: WordPress's bodies were read at a 64K limit and are now read at the helper's 8K. The largest recorded WordPress body is 3611 bytes, so each is still read whole.
Closes #284
Model: opus-5-5
PASS:
TestOrdinaryWordPressRequestsPassnow callswantRecordedRequestsPass, so WordPress's recorded requests with no body but aContent-Typeare inspected both ways, as the definition of done in #284 requires.Model: opus-5-5