Skip to content

Releases: AikidoSec/firewall-node

1.5.55

23 Jul 09:05
cba42ac
Compare
Choose a tag to compare

What's Changed

  • Fix context sometimes not available in event handlers
  • Sanitize output of pathToPayload
  • Fix SSRF false positives with different ports

1.5.54

18 Jul 08:27
Compare
Choose a tag to compare

What's Changed

  • Cleanup of tests and linting

1.5.53

15 Jul 15:17
eb5facd
Compare
Choose a tag to compare

What's Changed

  • Add docs for micro
  • Wrap undici if node 16.8+ and run tests on node 22

1.5.52

15 Jul 12:47
a31d559
Compare
Choose a tag to compare

What's Changed

  • Add support for micro server

1.5.51

15 Jul 07:36
7757f32
Compare
Choose a tag to compare

What's Changed

  • Check for unsupported runtime
  • Detect path traversal in file: URL
  • Send more clean stack traces

1.5.50

11 Jul 14:12
d0a15c3
Compare
Choose a tag to compare

What's Changed

  • Validate setUser(...) input and accept numbers as IDs

1.5.49

10 Jul 12:55
f71f368
Compare
Choose a tag to compare

What's Changed

  • Ignore error handlers and add end2end test for Sentry by @hansott in #274

Full Changelog: 1.5.48...1.5.49

1.5.48

08 Jul 10:47
4a5dc09
Compare
Choose a tag to compare

What's Changed

  • Add support for hapi 🚀
  • Add support for ShellJS
  • Add ~ to dangerous shell characters

1.5.47

03 Jul 15:51
9a725d8
Compare
Choose a tag to compare

What's Changed

  • Stop reporting redirects as API paths
  • Allow enabling 'blocking mode' from UI

1.5.46

02 Jul 15:52
e32791d
Compare
Choose a tag to compare

What's Changed

  • Amend detection for various sinks