1.5.45

What's Changed

• support SQL injection protection for SQLite3
• Protect against SSRF attacks

1.5.44

What's Changed

• Add support for xml parsers
• If request comes from localhost, don't rate limit unless production

1.5.43

What's Changed

• Check req.subdomains in express as a source

1.5.42

What's Changed

• Reset routes + Ignore more routes

Full Changelog: 1.5.41...1.5.42

1.5.41

What's Changed

• Collect hits for routes/endpoints by @hansott in #250

Full Changelog: 1.5.40...1.5.41

1.5.40

What's Changed

• Add printenv to command list by @timokoessler in #245
• Filter out more routes and replace secrets with :secret by @hansott in #248
• Improve secret detection by @hansott in #249

Full Changelog: 1.5.39...1.5.40

1.5.39

What's Changed

• Make Readme badges clickable by @timokoessler in #242
• Improve shell command detection by @timokoessler in #243
• Update prototype-pollution.md by @hansott in #244
• Use visit function to collect all StringValue's by @hansott in #247

Full Changelog: 1.5.38...1.5.39

1.5.38

What's Changed

• Add multiple shell commands
• Add support for GraphQL

1.5.37

What's Changed

• Inspect execFile & execFileSync by @timokoessler

1.5.36

What's Changed

• Ignore non-existing routes when reporting endpoints