[OTA-EITA]

Proposed changes

Documents the new default of tx.allowed_methods (900200) proposed in coreruleset/coreruleset#4931, which adds QUERY (RFC 10008) to the default allowed methods.

The settings reference now shows GET HEAD POST OPTIONS QUERY with the old default for earlier versions, why QUERY is in the minimal set (safe and idempotent like GET, with the query in the request body, so the request body rules and tx.allowed_request_content_type still apply), and how to keep the previous policy (set tx.allowed_methods without QUERY).

Further comments

Opened as a draft: please merge only if coreruleset/coreruleset#4931 is merged (the decision is on the agenda in coreruleset/coreruleset#4930). The version in the table says 4.31.0; I will update it if the change lands in a different release.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn