1.6.15

• Improve SSRF detection algo (server doing requests to itself)

1.6.14

• Improve URLs reported to dashboard (static files with hashes are no longer replaced with :secret)
• Add support for IP ranges in bypass list

1.6.13

What's Changed

• Fix import warnings with SyntheticDefaultImports enabled
• Implement IP allowlist (e.g. geo based)

1.6.12

• Improved handling of x-forwarded-for header
• Improved typescript types (optional dependencies)

1.6.11

• Never block bypass IP (if it would occur in a blocklist)
• Config update polling: Increase timeout and improve error logging

1.6.10

• Capture outbound hostname only if the port is known
• Improved SQL injection detection
• Show connection failures on startup

1.6.9

• Add support for Request instance being passed to fetch
• Improved wrapping for Hono framework

1.6.8

• Improved path traversal detection
• Improved SQL injection detection
• Improved reporting data to dashboard

1.6.7

• Improve SQL injection detection
• Compatibility for mysql2 3.11.5+

1.6.6

• Log attacks to the console