Skip to content
This repository has been archived by the owner on Jun 15, 2020. It is now read-only.

Latest commit

 

History

History
39 lines (23 loc) · 2.32 KB

ReleaseNotes353.md

File metadata and controls

39 lines (23 loc) · 2.32 KB

Good work, Python! The Protect agent is ready for the big time!

Fixes

  • Assess rules take effect for child applications.
  • Tags render correctly for IE11 users.
  • Removed appearance of Apply License options for View-level users.
  • Use the link to clear Advanced filters in the Libraries page.
  • Critical vulnerabilities disappear from your Dashboard as soon as you mark them "Not a Problem".

Agent Updates

Java summary

Contrast now allows users to set the Application Code attribute of an application by passing the contrast.application.code System property to the Java agent. The Java team also added System property contrast.stderr for directing Contrast logs to STDERR instead of a log file, improved accuracy for XSS detection, and fixed a deadlock at start-up which affects WebLogic 12. When bot-blocking is enabled, the Java agent will always block the Mozilla bot even when the user hasn't included any bots to block in their Contrast application configuration

.NET summary

The .NET team added an Assess rule for HSTS header missing as well as support for Contrast.AppName in DPAPI protected configs. We also fixed a concurrency issue that could cause an InvalidOperationException along with issues where headers set in global.asax weren't analyzed by Assess sensors and incorrect sources were reported for some Assess vulnerabilities.

Node.js summary

The Node team made a variety of performance and compatibility improvements including: better compatibility with the New Relic APM agent, fixing an issue with PostgreSQL options, and compatibility with applications that run uglify-js in their deployment pipeline. The agent also handles the case where the package.json isn't included in a application. Finally, the team added some propagation enhancements for better Assess accuracy in String.split and Array.join.

Ruby summary

The Ruby team improved class name resolution from the code file paths.

Python summary

Python Protect enters General Availability with this release! Remaining tasks for the Python team included tracking routes identified in the application for coverage statistics. We also added a new default location for configuration files under /etc/contrast.