9 Releases published by 1 person

• 1.6.0-beta.13

  published Nov 14, 2024

• 1.6.0-beta.14

  published Nov 18, 2024

• 1.6.0-beta.15

  published Nov 18, 2024

• 1.6.0-beta.16

  published Nov 19, 2024

• 1.6.0-beta.18

  published Nov 27, 2024

• 1.6.0-beta.19

  published Nov 28, 2024

• 1.6.0-beta.20

  published Dec 2, 2024

• 1.6.0

  published Dec 3, 2024

• 1.6.1

  published Dec 9, 2024

19 Pull requests merged by 3 people

• Keep all ports that we connect to

  #348 merged Dec 6, 2024

• Add Hono context unit test and fix types

  #472 merged Dec 6, 2024

• Use process.nextTick before wrapping Collection (mongodb v6.10.0)

  #471 merged Dec 6, 2024

• Fix lock files of sample apps

  #470 merged Dec 5, 2024

• Add links to framework specific docs

  #469 merged Dec 5, 2024

• Stable release

  #449 merged Dec 3, 2024

• fix: Express handler wrapping

  #467 merged Dec 2, 2024

• Improve package.json

  #466 merged Nov 29, 2024

• Test multiple versions of MongoDB and Express

  #465 merged Nov 28, 2024

• Test all supported undici versions: v4, v5, v6 and v7

  #464 merged Nov 28, 2024

• Add end2end test for apps bundled with esbuild

  #459 merged Nov 28, 2024

• Immediately patch global dispatcher undici

  #458 merged Nov 28, 2024

• Fix Hono v4.6.9 and newer

  #462 merged Nov 28, 2024

• Add support for IP address blocking

  #447 merged Nov 27, 2024

• Add end2end test for n8n

  #457 merged Nov 20, 2024

• Upgrade zen internals

  #456 merged Nov 19, 2024

• Add end2end test for compatibility with dd-trace

  #455 merged Nov 18, 2024

• Make non-owned props of express wrapped functions accessible

  #453 merged Nov 18, 2024

• Preserve original handler name for Ghost

  #452 merged Nov 14, 2024

6 Pull requests opened by 2 people

• PoC required packages

  #454 opened Nov 15, 2024

• Support Prisma ORM

  #460 opened Nov 22, 2024

• Output whether blocking or detection-only mode is enabled

  #461 opened Nov 25, 2024

• Mark JS values as unsafe

  #463 opened Nov 25, 2024

• Only build payload paths on attack

  #473 opened Dec 9, 2024

• Detect JS injections

  #474 opened Dec 13, 2024

10 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Add WebSocket support (ws)

  #270 commented on Dec 3, 2024 • 0 new comments

• Prevent undici SSRF attacks with redirects (2)

  #338 commented on Dec 3, 2024 • 0 new comments

• Enable SSRF redirect protection and add breaking test for AWS SDK v3

  #346 commented on Dec 3, 2024 • 0 new comments

• Support http2 client (SSRF) (2)

  #372 commented on Dec 3, 2024 • 0 new comments

• Detect more auth headers and cookies

  #380 commented on Nov 14, 2024 • 0 new comments

• Add ESM support (WIP)

  #402 commented on Dec 3, 2024 • 0 new comments

• Cleanup and update beta branch

  #433 commented on Dec 3, 2024 • 0 new comments

• Add new logger with log levels

  #435 commented on Dec 3, 2024 • 0 new comments

• Improve setUser function

  #442 commented on Dec 3, 2024 • 0 new comments

• Improve e2e tests

  #443 commented on Dec 3, 2024 • 0 new comments