📊 Quantitative test results for language: eng, year: 2023, size: 10K, paranoia level: 1:
🚀 Quantitative testing did not detect new false positives

The missing increase of inbound_anomaly_score is maybe something we could detect with linting? What do you think @theseion or @airween?

Hello @franbuehler

done for the title

The missing increase of inbound_anomaly_score is maybe something we could detect with linting? What do you think @theseion or @airween?

Yes, absolutely.

@touchweb-vincent could you also update rule 933135 and replace rce_score with php_injection_score?

The missing increase of inbound_anomaly_score is maybe something we could detect with linting? What do you think @theseion or @airween?

Absolutely - but at first glance I'm afraid that's not trivial. We should figure out what rules must contain a setvar action with any inbound_anomaly_score variable, how can we describe them with a logical expression. Eg. all rules which contain tag with paranoia-level/N?

Inbound / outbound could be tricky. But we could simply check that every rule with a paranoia level is setting a corresponding anomaly score variable.

The missing increase of inbound_anomaly_score is maybe something we could detect with linting? What do you think @theseion or @airween?

Yes, absolutely.

@touchweb-vincent could you also update rule 933135 and replace rce_score with php_injection_score?

Hello, done https://github.com/coreruleset/coreruleset/pull/4262/files