Triggers when a matches regex on a plain field LHS is one of the always-match patterns (., ., .+, ^, $, ^.$, |, etc.). The rule effectively has no condition and fires on every request — almost always a typo or oversight.
For path fields (http.request.uri.path, raw.http.request.uri.path), additional patterns are flagged: /, ^/, /., ^/., etc. Paths always start with /, so these are also always-match in path context.
Check if these are all covered
https://github.com/doctena-org/octorules-cloudflare/blob/ac57450/docs/lint/stage2-per-rule.md#cf548--overly-permissive-regex-pattern-matches-every-value
Triggers when a matches regex on a plain field LHS is one of the always-match patterns (., ., .+, ^, $, ^.$, |, etc.). The rule effectively has no condition and fires on every request — almost always a typo or oversight.
For path fields (http.request.uri.path, raw.http.request.uri.path), additional patterns are flagged: /, ^/, /., ^/., etc. Paths always start with /, so these are also always-match in path context.
Check if these are all covered
https://github.com/doctena-org/octorules-cloudflare/blob/ac57450/docs/lint/stage2-per-rule.md#cf548--overly-permissive-regex-pattern-matches-every-value