clawbot
fbe87a7c5e
check / check (push) Waiting to run
SWWAF_WAF_BODY_LIMIT (default off, at most 1G) has the Core Rule Set read form data and multipart up to the limit, the rest streaming on, and JSON and XML no larger than it, with text/json and the application and text types ending in +json or +xml. The part read is held for the app. A size or time limit met while reading ends the request. Content-Encoding is refused again on these kinds. A body Coraza cannot parse, or a multipart body failing its strict checks, adds 5, as does a multipart body the limit cuts before the colon of a part's header. Coraza is built with no_fs_access, so writes no file. Rule 900300 moves to phase 2. Judgement call: Content-Encoding is refused on a JSON or XML body too large to read, as SPEC.md allows. Model: opus-5-5
19 lines
599 B
Python
Executable File
19 lines
599 B
Python
Executable File
#!/bin/sh
|
|
# script/build: build bin/smallwebwaf on the host, with Go installed, for
|
|
# working on the code by hand. The version it reports comes from git, as
|
|
# in script/docker, and the no_fs_access tag is the Dockerfile's.
|
|
set -eu
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
|
|
ROOT="$(cd "$SCRIPT_DIR/.." && pwd -P)"
|
|
|
|
main() {
|
|
cd "$ROOT"
|
|
version="$(git describe --tags --always --dirty 2>/dev/null || true)"
|
|
[ -n "$version" ] || version="unknown"
|
|
go build -tags no_fs_access -trimpath -ldflags "-X main.Version=$version" \
|
|
-o bin/smallwebwaf ./cmd/smallwebwaf
|
|
}
|
|
|
|
main "$@"
|