Files
smallwebwaf/internal
sneak 0aec33b017
check / check (push) Failing after 6m24s
Core Rule Set: random passwords pass on the remaining password fields (closes #288)
Each app's sign-in, sign-up, password change and reset fields that had no
exclusion now skip the 35 rules random passwords set off, on that app's
paths and only when the query has no field of that name. Added gitea,
Vaultwarden's admin token, WordPress pass1/pass2/post_password and its REST
password, Drupal's forms and JSON, MediaWiki retype and password, Mastodon's
challenge, and Nextcloud's confirm, reset, change, share and OCS fields.
Vaultwarden's clients send a hash, which needs no exclusion.

Model: opus-5-5
2026-11-10 15:48:18 +00:00
..