clawbot 4b0af7f85b rproxy and servewaf replace the one-process smallwebwaf (closes #172, closes #165) ...

`smallwebwaf` with no command now prints the commands and exits with status 2.
The image runs rproxy, or servewaf with SMALLWEBWAF_COMMAND=servewaf. The
passing-on code, its settings and its log fields and metric go. internal/proxy
keeps the checks, answers, reports and own endpoints; its tests run through the
real rproxy. The documents describe the pair.

Judgement call: clients.json keeps token_refused, since state files refuse unknown fields.
Deviation: script/gitea-requests sets SWWAF_LOG_REQUEST_HEADERS, to label requests.

Model: opus-5-5

2026-11-05 06:26:21 +00:00

..

waf_test.go

Core Rule Set reads request bodies up to SWWAF_WAF_BODY_LIMIT (closes #116)

2026-10-08 12:59:13 +02:00

waf.go

rproxy and servewaf replace the one-process smallwebwaf (closes #172, closes #165)

2026-11-05 06:26:21 +00:00