sneak 7f1b0a14b4 Core Rule Set: gitea's search Referer exclusion skips /api/v2/search (closes #270) ...

Rule 900601 let Referer skip five rules when it named a repository's
search, issues or pull requests with the owner api, such as
/api/v2/search, Mastodon's search. A page opened from there skipped
script and SQL injection checks on Referer. gitea has no owner named
api, so a chained condition now leaves out those paths, as rule 900600
does.

Model: opus-5-5

2026-11-10 03:00:27 +00:00

..

testdata

Core Rule Set: MediaWiki's log, generator and watchlist fields pass (closes #258)

2026-11-10 03:09:24 +01:00

coreruleset_test.go

Core Rule Set: gitea's search Referer exclusion skips /api/v2/search (closes #270)

2026-11-10 03:00:27 +00:00

coreruleset.go

Core Rule Set: MediaWiki's ordinary requests pass by default (closes #237)

2026-11-10 00:58:15 +01:00

drupal_test.go

Core Rule Set: Drupal's JSON password reset takes an address (closes #262)

2026-11-10 03:09:17 +01:00

drupal.conf

Core Rule Set: Drupal's JSON password reset takes an address (closes #262)

2026-11-10 03:09:17 +01:00

gitea.conf

Core Rule Set: gitea's search Referer exclusion skips /api/v2/search (closes #270)

2026-11-10 03:00:27 +00:00

mediawiki_test.go

Core Rule Set: MediaWiki's log, generator and watchlist fields pass (closes #258)

2026-11-10 03:09:24 +01:00

mediawiki.conf

Core Rule Set: MediaWiki's log, generator and watchlist fields pass (closes #258)

2026-11-10 03:09:24 +01:00

wordpress.conf

Core Rule Set: WordPress's names and addresses pass on more fields (closes #245)

2026-11-09 21:58:18 +01:00