Currently the default_off message is not consistent and it is difficult to perform automated checking to re-activate these ruleset. #9582 #9842
For examples, we have mismatch, mismatches, mismatched for a mismatch error. Similarly, we have missing certificate chain, incomplete certificate chain for Incomplete certificate chain error.
BufferedIO.xml is particularly bad. It should be a platform=cacert ruleset, but the message is given in default_off. (It is a mismatch now)
I believe we have to come up with a set of keyword before proceeding to #9884
Note
In fact, I prefer to have some sort of whitelist to the existing default_off messages if they do not match the new grammar rather than producing a regex to match them all in order to pass Travis build. Is there anyway to do so? I will try to modify the existing default_off messages in order to fit them in the new grammar.
Updated: 2017.05.13
List of keywords
regional
reset
refused
timeout
cert-algo
cert-chain
expired
self-signed
mismatched
status-mismatched
status-unexpected // 200 Error pages
status-others // other than 200, i.e. 4xx/5xx
loops // secure connection redirects to plaintext
content-different
breaks-site // in a board sense.
breaks-third-parties
cors // CORS issues
coverage // failed ruleset test
request-owner
request-user
others // details should be stated in the ruleset comment
Currently the
default_offmessage is not consistent and it is difficult to perform automated checking to re-activate theseruleset. #9582 #9842For examples, we have
mismatch,mismatches,mismatchedfor a mismatch error. Similarly, we havemissing certificate chain,incomplete certificate chainforIncomplete certificate chain error.BufferedIO.xmlis particularly bad. It should be aplatform=cacertruleset, but the message is given indefault_off. (It is amismatchnow)I believe we have to come up with a set of keyword before proceeding to #9884
Note
In fact, I prefer to have some sort ofI will try to modify the existingwhitelistto the existingdefault_offmessages if they do not match the new grammar rather than producing aregexto match them all in order to pass Travis build. Is there anyway to do so?default_offmessages in order to fit them in the new grammar.Updated: 2017.05.13