clawbot 9dc913ecb5 Core Rule Set: ls -la passes in q on a gitea user's or organisation's page (closes #349) ...

On a path of one segment made of the characters a user's or an
organisation's name may hold, q now skips 932250 too, unless the path
ends in a server-side script's extension, such as .php or .cgi. The
searches on a user's and an organisation's page are recorded from gitea
1.27.3 and Forgejo 17.0.1.

Model: opus-5-5

2026-11-11 12:36:59 +00:00

..

drupal-requests.txt

Core Rule Set: Drupal's JSON password reset takes an address (closes #262)

2026-11-10 03:09:17 +01:00

forgejo-requests.txt

Core Rule Set: ls -la passes in q on a gitea user's or organisation's page (closes #349)

2026-11-11 12:36:59 +00:00

gitea-requests.txt

Core Rule Set: ls -la passes in q on a gitea user's or organisation's page (closes #349)

2026-11-11 12:36:59 +00:00

mastodon-requests.txt

Core Rule Set: Mastodon's email field passes ordinary addresses (closes #273)

2026-11-10 06:43:23 +01:00

mediawiki-requests.txt

Core Rule Set: MediaWiki's password fields pass on a wiki in any language (closes #299)

2026-11-11 00:58:00 +01:00

nextcloud-requests.txt

Core Rule Set: Nextcloud's calendar and contacts sync pass (closes #280)

2026-11-10 11:57:58 +01:00

vaultwarden-requests.txt

Core Rule Set: Vaultwarden's ordinary requests pass by default (closes #239)

2026-11-10 07:26:13 +01:00

wordpress-requests.txt

Core Rule Set: WordPress's names and addresses pass on more fields (closes #245)

2026-11-09 21:58:18 +01:00