sneak fa72d8d62a Core Rule Set: more of Drupal's ordinary fields pass (closes #244) ...

Names, searches, addresses and the page to return to on more Drupal
paths skip the rules that misfire on them: 930120, 932120, 932250 and
932260, plus 932230 and 932235 on destination only. The oEmbed url
skips only 930120 and 932120. Every Drupal path may carry a language
prefix such as /fr. Requests recorded from Drupal 11.4.11 with plain
words, python3, powershell, ls -la and .htaccess are added to the
test data; tests show attacks and "; wget ..." still refused on each
new field.

Model: opus-5-5

2026-11-09 20:19:05 +00:00

..

drupal-requests.txt

Core Rule Set: more of Drupal's ordinary fields pass (closes #244)

2026-11-09 20:19:05 +00:00

gitea-requests.txt

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

wordpress-requests.txt

Core Rule Set: WordPress's ordinary requests pass by default (closes #235)

2026-11-09 19:26:17 +01:00