sneak f50f1c171f Core Rule Set: gitea's repository search exclusion skips /api/v2/search (closes #266) ...

Rule 900600 matched /api/v2/search, Mastodon's search, as gitea's search
inside a repository, so attacks in q scored 0 there. gitea has no owner
named api, so a chained condition now leaves out /api/<x>/search. Go's
regular expressions have no lookahead, so the exclusion cannot be written
inside the pattern.

Model: opus-5-5

2026-11-10 01:33:27 +00:00

..

testdata

Core Rule Set: MediaWiki's ordinary requests pass by default (closes #237)

2026-11-10 00:58:15 +01:00

coreruleset_test.go

Core Rule Set: gitea's repository search exclusion skips /api/v2/search (closes #266)

2026-11-10 01:33:27 +00:00

coreruleset.go

Core Rule Set: MediaWiki's ordinary requests pass by default (closes #237)

2026-11-10 00:58:15 +01:00

drupal_test.go

Core Rule Set tests: name repeated attack strings (closes #263)

2026-11-10 01:26:07 +01:00

drupal.conf

Core Rule Set: Drupal's JSON password reset passes (closes #259)

2026-11-10 00:58:08 +01:00

gitea.conf

Core Rule Set: gitea's repository search exclusion skips /api/v2/search (closes #266)

2026-11-10 01:33:27 +00:00

mediawiki_test.go

Core Rule Set tests: name repeated attack strings (closes #263)

2026-11-10 01:26:07 +01:00

mediawiki.conf

Core Rule Set: MediaWiki's ordinary requests pass by default (closes #237)

2026-11-10 00:58:15 +01:00

wordpress.conf

Core Rule Set: WordPress's names and addresses pass on more fields (closes #245)

2026-11-09 21:58:18 +01:00