WAF: Ensure that non-set $_SERVER['REQUEST_METHOD'] is treated the same as CLI in the sense that the WAF is skipped.#49465

Merged

ArSn merged 2 commits into

trunkfrom

fix/protect-174-cli-cron-403

Jun 12, 2026

Commits on Jun 8, 2026

WAF: Ensure that empty $_SERVER['REQUEST_METHOD'] is treated the same as CLI in the sense that the WAF is skipped.
ArSn
committed

Commits on Jun 11, 2026

Change the check to "! isset" to be even safer in detecting CLI environments. Ensure the tests always clean up after themselves.
ArSn
committed