📊 Quantitative test results for language: eng, year: 2023, size: 10K, paranoia level: 1:
🚀 Quantitative testing did not detect new false positives

Hello,

Done

I don't understand why 959100-3 is failling : https://github.com/touchweb-vincent/coreruleset/blob/patch-3/tests/regression/tests/RESPONSE-959-BLOCKING-EVALUATION/959100.yaml#L52

Interesting, I think there's a race condition with our CI pipeline, that change shouldn't have caused 959100-3 to fail. Tests now pass after re-running them.

@theseion Can you take a look at what might've caused this: https://github.com/coreruleset/coreruleset/actions/runs/18737486580/job/53447100629#step:4:379

There's nothing we can do about that, unfortunately. Parsing logs is inherently brittle and we already try very hard to force the web server to flush the log before we try to read it. We're actually pretty lucky that we see these issues only a handful of times per year.

config/settings.inc.php is not covered : curl -H "x-format-output: txt-matched-rules" -H "x-crs-paranoia-level:4" "https://sandbox.coreruleset.org/?test=/config/settings.inc.php"

Where do you want me to add config/parameters.php ?

@touchweb-vincent Sorry, I meant the data files.

These should be added to restricted-upload.data

config/parameters.php
config/settings.inc.php

config/settings.inc.php is not covered

Yes your right, I missed that.

I didn't add them in restricted-upload.data because there are already present :

config/parameters.php :

@touchweb-vincent

That's restricted-files.data, not restricted_upload.data

Same here :

parameters.php :