Skip to content

v5.14.6

Choose a tag to compare

@stanislav-web stanislav-web released this 02 May 10:42
· 58 commits to master since this release
  • (fix) avoided classifying passive Cloudflare CDN headers as blocked WAF responses
  • (fix) preserved normal 301 and 404 classification for Cloudflare CDN responses so --auto-calibrate can build a usable baseline
  • (fix) delayed --waf-safe-mode activation for isolated ordinary WAF blocks
  • (fix) safe mode now activates immediately only for explicit challenge/rate-limit signals or after repeated blocked responses in a short rolling window
  • (fix) blocked responses no longer trigger recursive expansion before safe mode activation
  • (fix) preserved WAF safe-mode block-window state in session snapshots
  • (tests) added regression coverage for passive Cloudflare CDN responses, isolated WAF blocks, threshold activation and immediate challenge/rate-limit activation