clawbot d70fb34f40 Core Rule Set: Drupal's JSON password reset takes an address (closes #262) ...

POST /user/password?_format=json with a mail of python3@example.com or
powershell@example.com was refused while bodies are read. On that path,
the JSON field mail now skips 932120 and 932260, the two rules the
recorded addresses set off, unless the query has a json.mail parameter.
Recorded from Drupal 11.4.11.

Model: opus-5-5

2026-11-10 03:09:17 +01:00

..

testdata

Core Rule Set: Drupal's JSON password reset takes an address (closes #262)

2026-11-10 03:09:17 +01:00

coreruleset_test.go

Core Rule Set tests: name repeated attack strings (closes #263)

2026-11-10 01:26:07 +01:00

coreruleset.go

Core Rule Set: MediaWiki's ordinary requests pass by default (closes #237)

2026-11-10 00:58:15 +01:00

drupal_test.go

Core Rule Set: Drupal's JSON password reset takes an address (closes #262)

2026-11-10 03:09:17 +01:00

drupal.conf

Core Rule Set: Drupal's JSON password reset takes an address (closes #262)

2026-11-10 03:09:17 +01:00

gitea.conf

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

mediawiki_test.go

Core Rule Set tests: name repeated attack strings (closes #263)

2026-11-10 01:26:07 +01:00

mediawiki.conf

Core Rule Set: MediaWiki's ordinary requests pass by default (closes #237)

2026-11-10 00:58:15 +01:00

wordpress.conf

Core Rule Set: WordPress's names and addresses pass on more fields (closes #245)

2026-11-09 21:58:18 +01:00