clawbot 5ef701a381 Core Rule Set: gitea and Forgejo file and branch names in bodies pass (closes #346) ...

While SWW_WAF_BODY_LIMIT is set, these body fields skip only the rules
that refused them, on their own paths:

- the web editor's tree_path, commit_summary and content;
- new_branch_name of a branch created on the web or the API;
- from and to of a renamed branch, on gitea's and Forgejo's paths;
- head of a pull request and message of a file, through the API.

None applies when the query has a parameter of the same name. The
requests were recorded from gitea 1.27.3 and Forgejo 17.0.1.

Model: opus-5-5

2026-11-11 13:08:23 +00:00

..

drupal-requests.txt

Core Rule Set: Drupal's JSON password reset takes an address (closes #262)

2026-11-10 03:09:17 +01:00

forgejo-names-in-bodies.txt

Core Rule Set: gitea and Forgejo file and branch names in bodies pass (closes #346)

2026-11-11 13:08:23 +00:00

forgejo-requests.txt

Core Rule Set: Forgejo's ordinary requests pass by default (closes #342)

2026-11-11 12:12:50 +01:00

gitea-names-in-bodies.txt

Core Rule Set: gitea and Forgejo file and branch names in bodies pass (closes #346)

2026-11-11 13:08:23 +00:00

gitea-requests.txt

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

mastodon-requests.txt

Core Rule Set: Mastodon's email field passes ordinary addresses (closes #273)

2026-11-10 06:43:23 +01:00

mediawiki-requests.txt

Core Rule Set: MediaWiki's password fields pass on a wiki in any language (closes #299)

2026-11-11 00:58:00 +01:00

nextcloud-requests.txt

Core Rule Set: Nextcloud's calendar and contacts sync pass (closes #280)

2026-11-10 11:57:58 +01:00

vaultwarden-requests.txt

Core Rule Set: Vaultwarden's ordinary requests pass by default (closes #239)

2026-11-10 07:26:13 +01:00

wordpress-requests.txt

Core Rule Set: WordPress's names and addresses pass on more fields (closes #245)

2026-11-09 21:58:18 +01:00