sneak 8e8bfe6718 Core Rule Set: Drupal's ordinary requests pass by default (closes #236) ...

Adds drupal.conf, the ninth change: on Drupal's paths, the fields that
carry a search, a name, a file name or an address skip the rules that
refused ordinary requests there. The recorded requests from Drupal 11.4
pass at the defaults and while bodies are read; SQL injection, path
traversal and script injection stay refused on those fields.

Model: opus-5-5

2026-11-09 10:01:21 +00:00

..

drupal-requests.txt

Core Rule Set: Drupal's ordinary requests pass by default (closes #236)

2026-11-09 10:01:21 +00:00

gitea-requests.txt

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00