clawbot c26fffca1e Leave SWWAF_RATE_LIMIT_EXEMPT_PATHS out of the request rate limits (closes #77) ...

A request is neither counted nor refused by the request rate limits
when its path as sent, the path the app receives, not percent-decoded,
starts with one of the comma-separated prefixes in
SWWAF_RATE_LIMIT_EXEMPT_PATHS, so /%61ssets/x is not under /assets/. A
request whose decoded path contains .. or a backslash, or whose path as
sent holds an encoded slash, is never exempt, since an app may act on
it as a path outside every prefix, such as /assets/..%2Flogin as
/login. The static lists, bans and the country lists still apply. The
setting is empty by default, and a prefix that does not start with /
stops the start. README.md documents it.

Model: opus-5-5

2026-10-06 13:46:00 +00:00

..

admin.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

bans_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

bans.go

Observe mode: log what would be refused, refuse nothing (closes #78)

2026-10-06 13:04:43 +02:00

bodies.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

client_test.go

Re-vendor the canonical files from sneak/prompts at dd4027b (closes #65)

2026-10-06 04:13:35 +02:00

client.go

Per-client request rate limits over a minute, an hour and a day (closes #43)

2026-10-04 04:24:34 +02:00

countries_test.go

Network lists: always allowed, exempt from rate limits, always refused (closes #19)

2026-10-06 02:36:27 +02:00

countries.go

Network lists: always allowed, exempt from rate limits, always refused (closes #19)

2026-10-06 02:36:27 +02:00

health_test.go

The image apps build FROM, with its health check (closes #45)

2026-10-04 10:05:30 +02:00

history_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

limits_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

metrics_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

observe_test.go

Observe mode: log what would be refused, refuse nothing (closes #78)

2026-10-06 13:04:43 +02:00

passthrough_test.go

The header size and the idle time as settings (closes #70)

2026-10-06 05:05:31 +02:00

proxy_test.go

Leave SWWAF_RATE_LIMIT_EXEMPT_PATHS out of the request rate limits (closes #77)

2026-10-06 13:46:00 +00:00

proxy.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

ratelimits_test.go

Leave SWWAF_RATE_LIMIT_EXEMPT_PATHS out of the request rate limits (closes #77)

2026-10-06 13:46:00 +00:00

request.go

Leave SWWAF_RATE_LIMIT_EXEMPT_PATHS out of the request rate limits (closes #77)

2026-10-06 13:46:00 +00:00

staticlists_test.go

Ban the netblock of a client that breaks a rate limit, in memory (closes #18)

2026-10-06 05:29:03 +02:00

timeouts_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00