clawbot 7e26fe37bc Gitea setup: Core Rule Set blocks attacks, not ordinary Gitea traffic (closes #198) ...

The Gitea setup runs the Core Rule Set in block mode. Rules that refused
ordinary Gitea requests are switched off only where they misfired:

- deploy/gitea/crs-exclusions.conf, loaded through the new setting
  SWWAF_CORE_RULE_SET_EXCLUSIONS_FILE, covers Gitea's search, file-name
  and branch-name fields, Referer, and file paths;
- smallwebwaf's defaults gain a seventh change: the registry upload
  path's from parameter skips 932260.

A file that cannot be read, does not parse or names an id from 900000
to 900999 stops servewaf at start. internal/waf's tests and
script/gitea-setup send the recorded requests in
internal/waf/testdata/gitea-requests.txt and three attacks.

Model: opus-5-5

2026-11-06 19:15:51 +00:00

..

bootstrap

The image apps build FROM, with its health check (closes #45)

2026-10-04 10:05:30 +02:00

build

Core Rule Set reads request bodies up to SWWAF_WAF_BODY_LIMIT (closes #116)

2026-10-08 12:59:13 +02:00

check

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

cibuild

Re-vendor the canonical files from sneak/prompts at dd4027b (closes #65)

2026-10-06 04:13:35 +02:00

docker

Re-vendor the canonical files from sneak/prompts at dd4027b (closes #65)

2026-10-06 04:13:35 +02:00

example-app

rproxy and servewaf replace the one-process smallwebwaf (closes #172, closes #165)

2026-11-05 13:15:05 +01:00

fmt

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

fmt-check

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

gitea-requests

Gitea setup: Core Rule Set blocks attacks, not ordinary Gitea traffic (closes #198)

2026-11-06 19:15:51 +00:00

gitea-setup

Gitea setup: Core Rule Set blocks attacks, not ordinary Gitea traffic (closes #198)

2026-11-06 19:15:51 +00:00

install-precommit

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

lint

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

precommit

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

projectname

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

run

rproxy and servewaf replace the one-process smallwebwaf (closes #172, closes #165)

2026-11-05 13:15:05 +01:00

setup

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

test

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

tidy

make tidy, and make check failing on an untidy go.mod or go.sum (closes #99)

2026-10-07 10:30:46 +02:00