Files
smallwebwaf/internal
sneak 133f6281e1
check / check (push) Successful in 11m19s
Core Rule Set: Drupal's JSON password reset takes an address (closes #262)
POST /user/password?_format=json with a mail of python3@example.com or
powershell@example.com was refused while bodies are read. On that path,
the JSON field mail now skips 932120 and 932260, the two rules the
recorded addresses set off, unless the query has a json.mail parameter.
Recorded from Drupal 11.4.11.

Model: opus-5-5
2026-11-10 01:46:33 +00:00
..