sneak 0d517762b0 Core Rule Set tests: check the recorded requests without the race detector (closes #290) ...

The tests that check the apps' recorded requests move to
internal/coreruleset/recorded_test.go, behind the recorded build tag. The
test phase runs them in a second go test, without -race.

The Gitea and WordPress tests are split in two. Their recorded-request loops
become TestOrdinaryGiteaRequestsPass and TestOrdinaryWordPressRequestsPass;
their attack checks stay in the race pass as TestGiteaAttacksAreRefused and
TestWordPressAttacksAreRefused.

Model: opus-5-5

2026-11-10 12:28:01 +00:00

..

testdata

Core Rule Set: Nextcloud's calendar and contacts sync pass (closes #280)

2026-11-10 11:57:58 +01:00

coreruleset_test.go

Core Rule Set tests: check the recorded requests without the race detector (closes #290)

2026-11-10 12:28:01 +00:00

coreruleset.go

Core Rule Set: Nextcloud's ordinary requests pass by default (closes #240)

2026-11-10 09:43:18 +01:00

drupal_test.go

Core Rule Set tests: check the recorded requests without the race detector (closes #290)

2026-11-10 12:28:01 +00:00

drupal.conf

Core Rule Set: Drupal's JSON password reset takes an address (closes #262)

2026-11-10 03:09:17 +01:00

gitea.conf

Core Rule Set: gitea's search Referer exclusion skips /api/v2/search (closes #270)

2026-11-10 04:26:08 +01:00

mastodon_test.go

Core Rule Set tests: check the recorded requests without the race detector (closes #290)

2026-11-10 12:28:01 +00:00

mastodon.conf

Core Rule Set: Mastodon's email field passes ordinary addresses (closes #273)

2026-11-10 06:43:23 +01:00

mediawiki_test.go

Core Rule Set tests: check the recorded requests without the race detector (closes #290)

2026-11-10 12:28:01 +00:00

mediawiki.conf

Core Rule Set: MediaWiki's log, generator and watchlist fields pass (closes #258)

2026-11-10 03:09:24 +01:00

nextcloud_test.go

Core Rule Set tests: check the recorded requests without the race detector (closes #290)

2026-11-10 12:28:01 +00:00

nextcloud.conf

Core Rule Set: Nextcloud's calendar and contacts sync pass (closes #280)

2026-11-10 11:57:58 +01:00

recorded_test.go

Core Rule Set tests: check the recorded requests without the race detector (closes #290)

2026-11-10 12:28:01 +00:00

vaultwarden_test.go

Core Rule Set tests: check the recorded requests without the race detector (closes #290)

2026-11-10 12:28:01 +00:00

vaultwarden.conf

Core Rule Set: Vaultwarden's ordinary requests pass by default (closes #239)

2026-11-10 07:26:13 +01:00

wordpress.conf

Core Rule Set: WordPress's names and addresses pass on more fields (closes #245)

2026-11-09 21:58:18 +01:00