Open a GitHub issue for anything that does not involve attacker-usable detail: a false positive, a store that broke, a Magento version where the hardening script reports unrecognised method signature.

For anything that would help an attacker, including a bypass of these rules, email support@disrex.nl instead of filing publicly. Include the rule you bypassed and the Magento version. Expect a reply within two working days.

This repository mitigates a vulnerability it did not discover. Send new findings about StyleSmuggler itself to the Sansec forensics team and to Adobe PSIRT, not here.

This repository was written with AI assistance during a live incident response, in a few hours, and has not been through review. The rules derive from traffic captured on a store that was genuinely compromised; much of the rest is untested outside that one environment. See the banner at the top of the README for the split between what is verified and what is not.

Bug reports about wrong or dangerous commands are welcome and useful. Open an issue.

These rules reduce exposure. They are not a vendor patch and they are not a guarantee. Replace them with Adobe's official fix once it ships, and re-run the scanner afterwards to confirm nothing arrived in the meantime.