Reserved WebDecoy-Test User-Agent always records a test detection

[cport1]

Companion to WebDecoy/app#698 (part of WebDecoy/app#677).

curl -A "WebDecoy-Test/1.0" https://your-site.example/ now always records a detection:

• Logged locally on every install (visible on the plugin's Detections page), submitted to the cloud on connected installs
• Answered with a 403 JSON receipt so the curl output itself shows the plugin acted
• Checked before the allowlist (a developer testing from an allowlisted IP still gets their receipt), before the block check, and before rules: a test must always fire and must never trip enforcement
• Skips the critical-moment alert queue (a test must not page anyone)
• The cloud labels these rows as tests and keeps them out of stats and billing

All 94 tests pass; phpcs 0 errors. Ships with the next release via bin/release-all.sh (not releasing here).

[cport1]

Companion to WebDecoy/app#698 (part of WebDecoy/app#677).

curl -A "WebDecoy-Test/1.0" https://your-site.example/ now always records a detection:

• Logged locally on every install (visible on the plugin's Detections page), submitted to the cloud on connected installs
• Answered with a 403 JSON receipt so the curl output itself shows the plugin acted
• Checked before the allowlist (a developer testing from an allowlisted IP still gets their receipt), before the block check, and before rules: a test must always fire and must never trip enforcement
• Skips the critical-moment alert queue (a test must not page anyone)
• The cloud labels these rows as tests and keeps them out of stats and billing

All 94 tests pass; phpcs 0 errors. Ships with the next release via bin/release-all.sh (not releasing here).

[cport1]

Companion to WebDecoy/app#698 (part of WebDecoy/app#677).

curl -A "WebDecoy-Test/1.0" https://your-site.example/ now always records a detection:

• Logged locally on every install (visible on the plugin's Detections page), submitted to the cloud on connected installs
• Answered with a 403 JSON receipt so the curl output itself shows the plugin acted
• Checked before the allowlist (a developer testing from an allowlisted IP still gets their receipt), before the block check, and before rules: a test must always fire and must never trip enforcement
• Skips the critical-moment alert queue (a test must not page anyone)
• The cloud labels these rows as tests and keeps them out of stats and billing

All 94 tests pass; phpcs 0 errors. Ships with the next release via bin/release-all.sh (not releasing here).

[cport1]

Companion to WebDecoy/app#698 (part of WebDecoy/app#677).

curl -A "WebDecoy-Test/1.0" https://your-site.example/ now always records a detection:

• Logged locally on every install (visible on the plugin's Detections page), submitted to the cloud on connected installs
• Answered with a 403 JSON receipt so the curl output itself shows the plugin acted
• Checked before the allowlist (a developer testing from an allowlisted IP still gets their receipt), before the block check, and before rules: a test must always fire and must never trip enforcement
• Skips the critical-moment alert queue (a test must not page anyone)
• The cloud labels these rows as tests and keeps them out of stats and billing

All 94 tests pass; phpcs 0 errors. Ships with the next release via bin/release-all.sh (not releasing here).

[cport1]

Companion to WebDecoy/app#698 (part of WebDecoy/app#677).

curl -A "WebDecoy-Test/1.0" https://your-site.example/ now always records a detection:

• Logged locally on every install (visible on the plugin's Detections page), submitted to the cloud on connected installs
• Answered with a 403 JSON receipt so the curl output itself shows the plugin acted
• Checked before the allowlist (a developer testing from an allowlisted IP still gets their receipt), before the block check, and before rules: a test must always fire and must never trip enforcement
• Skips the critical-moment alert queue (a test must not page anyone)
• The cloud labels these rows as tests and keeps them out of stats and billing

All 94 tests pass; phpcs 0 errors. Ships with the next release via bin/release-all.sh (not releasing here).

[cport1]

Companion to WebDecoy/app#698 (part of WebDecoy/app#677).

curl -A "WebDecoy-Test/1.0" https://your-site.example/ now always records a detection:

• Logged locally on every install (visible on the plugin's Detections page), submitted to the cloud on connected installs
• Answered with a 403 JSON receipt so the curl output itself shows the plugin acted
• Checked before the allowlist (a developer testing from an allowlisted IP still gets their receipt), before the block check, and before rules: a test must always fire and must never trip enforcement
• Skips the critical-moment alert queue (a test must not page anyone)
• The cloud labels these rows as tests and keeps them out of stats and billing

All 94 tests pass; phpcs 0 errors. Ships with the next release via bin/release-all.sh (not releasing here).

[cport1]

Companion to WebDecoy/app#698 (part of WebDecoy/app#677).

curl -A "WebDecoy-Test/1.0" https://your-site.example/ now always records a detection:

• Logged locally on every install (visible on the plugin's Detections page), submitted to the cloud on connected installs
• Answered with a 403 JSON receipt so the curl output itself shows the plugin acted
• Checked before the allowlist (a developer testing from an allowlisted IP still gets their receipt), before the block check, and before rules: a test must always fire and must never trip enforcement
• Skips the critical-moment alert queue (a test must not page anyone)
• The cloud labels these rows as tests and keeps them out of stats and billing

All 94 tests pass; phpcs 0 errors. Ships with the next release via bin/release-all.sh (not releasing here).

[cport1]

Companion to WebDecoy/app#698 (part of WebDecoy/app#677).

curl -A "WebDecoy-Test/1.0" https://your-site.example/ now always records a detection:

• Logged locally on every install (visible on the plugin's Detections page), submitted to the cloud on connected installs
• Answered with a 403 JSON receipt so the curl output itself shows the plugin acted
• Checked before the allowlist (a developer testing from an allowlisted IP still gets their receipt), before the block check, and before rules: a test must always fire and must never trip enforcement
• Skips the critical-moment alert queue (a test must not page anyone)
• The cloud labels these rows as tests and keeps them out of stats and billing

All 94 tests pass; phpcs 0 errors. Ships with the next release via bin/release-all.sh (not releasing here).