sneak 91d37d40d3 Core Rule Set: more of Drupal's ordinary fields pass (closes #244) ...

Names, searches and the page to return to on more Drupal paths skip
the rules that misfire on them: 930120, 932120, 932250 and 932260,
plus 932230 and 932235 on destination only. An email address skips
930120, 932120 and 932260; the oEmbed url only 930120 and 932120.
Every Drupal path may carry a language prefix such as /fr. Requests
recorded from Drupal 11.4.11 with plain words, python3, powershell,
ls -la and .htaccess are added to the test data; tests show attacks
and "; wget ..." still refused on each new field.

Model: opus-5-5

2026-11-09 21:34:42 +00:00

..

testdata

Core Rule Set: more of Drupal's ordinary fields pass (closes #244)

2026-11-09 21:34:42 +00:00

coreruleset_test.go

Core Rule Set: test concurrent requests keep their own exclusions

2026-11-09 20:59:45 +00:00

coreruleset.go

Core Rule Set: Drupal's ordinary requests pass by default (closes #236)

2026-11-09 19:57:53 +01:00

drupal_test.go

Core Rule Set: more of Drupal's ordinary fields pass (closes #244)

2026-11-09 21:34:42 +00:00

drupal.conf

Core Rule Set: more of Drupal's ordinary fields pass (closes #244)

2026-11-09 21:34:42 +00:00

gitea.conf

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

wordpress.conf

Core Rule Set: WordPress's names and addresses pass on more fields (closes #245)

2026-11-09 21:58:18 +01:00