sneak a6e80ca958 waf: refuse request lines and header lines over 8 KiB first (closes #339) ...

The header limits now also refuse a request line over 8 KiB with 414
(action request_line_too_long) and a header line over 8 KiB, Host
included, with 431. Like the other header limits they are fixed, run
first and make no ban. One long query string or cookie no longer keeps
the Core Rule Set busy for a third of a second.

Model: opus-5-5

2026-11-13 19:43:42 +00:00

..

abuseipdb.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

admin_test.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

admin.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

alerts_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

anomaly_internal_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

anomaly_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

answertime_test.go

waf: refuse request lines and header lines over 8 KiB first (closes #339)

2026-11-13 19:43:42 +00:00

bans_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

bans.go

Remove the CrowdSec decision feed (closes #315)

2026-11-13 20:43:05 +01:00

biased_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

biased.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

blocklists.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

bytelimits_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

bytelimits.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

client.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

coreruleset_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

coreruleset.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

countries_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

countries.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

denynets.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

dnsbl.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

headerlimits.go

waf: refuse request lines and header lines over 8 KiB first (closes #339)

2026-11-13 19:43:42 +00:00

health_test.go

Format Go with gofmt, then golines -m 77 (closes #215)

2026-11-11 17:29:12 +01:00

heuristics.go

waf: refuse request lines and header lines over 8 KiB first (closes #339)

2026-11-13 19:43:42 +00:00

history_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

lookup_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

lookup.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

metrics_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

observe_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

proxy_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

proxy.go

Remove the CrowdSec decision feed (closes #315)

2026-11-13 20:43:05 +01:00

ratelimits_test.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

ratelimits.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

refusallimit_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

refusallimit.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

reputation_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

reputation.go

Remove the CrowdSec decision feed (closes #315)

2026-11-13 20:43:05 +01:00

request.go

waf: refuse request lines and header lines over 8 KiB first (closes #339)

2026-11-13 19:43:42 +00:00

requestlog_test.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

routewatchtags_test.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

routewatchtags.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

rulefiles_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

rulefiles.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

staticlists_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

tagdeny_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

tagdeny.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

taglists_test.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

taglists.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

trappaths_test.go

Rename the settings whose names do not say what they control (closes #234)

2026-11-12 11:13:27 +01:00

trappaths.go

Read every setting through viper and rename the settings (closes #211)

2026-11-12 05:43:47 +01:00

waf_test.go

waf: refuse request lines and header lines over 8 KiB first (closes #339)

2026-11-13 19:43:42 +00:00

waf.go

Remove the CrowdSec decision feed (closes #315)

2026-11-13 20:43:05 +01:00