azurit
azurit
Just install a new plugin instead of RE package.
@jessebot Rule Exclusion package. [This plugin](https://github.com/coreruleset/nextcloud-rule-exclusions-plugin) is some kind of a new version of old RE package.
Which rule should handle this? 941180?
@niklasweimann Hi and thanks for reporting this. The minimal match is with `time expr`. This looks really strane, it should not match. I found also other similar matches but wasn't...
Do not delete it yet, i reported it as a spam.
Do we need a completely new rule for this?
Failing tests are including keywords in multiple XML attributes. I found only [one exploits](https://www.exploit-db.com/exploits/42627) which is splitted accross multiple XML elements/attributes and it is going to be catched also after...
I would go with 2.
@fzipi Can you look at it now? Thnx.