clawbot 3a37f82e34 Core Rule Set: more of Drupal's ordinary fields pass (closes #244) ...

Names, searches and the page to return to on more Drupal paths skip
the rules that misfire on them: 930120, 932120, 932250 and 932260,
plus 932230 and 932235 on destination only. An email address skips
930120, 932120 and 932260; the oEmbed url only 930120 and 932120.
Every Drupal path may carry a language prefix: a first segment of two
or three lowercase letters, such as /fr. Requests recorded from Drupal
11.4.11 with plain words, python3, powershell, ls -la and .htaccess are
added to the test data; tests show attacks and "; wget ..." still
refused on each new field.

Model: opus-5-5

2026-11-09 23:09:15 +01:00

..

testdata

Core Rule Set: more of Drupal's ordinary fields pass (closes #244)

2026-11-09 23:09:15 +01:00

coreruleset_test.go

Core Rule Set: test concurrent requests keep their own exclusions

2026-11-09 20:59:45 +00:00

coreruleset.go

Core Rule Set: Drupal's ordinary requests pass by default (closes #236)

2026-11-09 19:57:53 +01:00

drupal_test.go

Core Rule Set: more of Drupal's ordinary fields pass (closes #244)

2026-11-09 23:09:15 +01:00

drupal.conf

Core Rule Set: more of Drupal's ordinary fields pass (closes #244)

2026-11-09 23:09:15 +01:00

gitea.conf

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

wordpress.conf

Core Rule Set: WordPress's names and addresses pass on more fields (closes #245)

2026-11-09 21:58:18 +01:00