Skip to content

v4.2.0

Choose a tag to compare

View all tags
@rennf93 rennf93 released this 25 Aug 15:58
· 48 commits to master since this release
v4.2.0
2f5c441
This commit was signed with the committer’s verified signature.
rennf93 Renzo Franceschini
GPG key ID: B48363D3A3A4CF78
Verified
Learn about vigilant mode.

guard-core 3.13.0 compatibility: inline bypass replication, bounded body readers, behavior-scan and auth-verifier lockstep.

  • Fixed: guard-core 3.12.0 (30f43944) made BypassHandler.handle_passthrough and handle_security_bypass require a call_next callable, so calls without it raised TypeError on every request and cascaded to 500. Flask before_request cannot invoke the downstream view, so _check_passthrough and _check_security_bypass now replicate the bypass decision inline (flask.g.guard_passthrough + early short-circuit), matching fastapi-guard.
  • Added: FlaskGuardRequest/FlaskGuardResponse.read_body_prefix(max_bytes) implement guard-core 3.12.0 SyncBoundedBodyReader/SyncBoundedResponseBodyReader protocols.
  • Fixed (tests): behavior_scan_response_body fixture, detection-cache seam patch (helpers.detect_penetration_attempt), auth_verifier fixture, honeypot read_body_prefix, 72 pre-existing mypy errors.
  • Compatibility: requires guard-core 3.13.0. No public API change.

See CHANGELOG.md for full details.

Assets 2
Loading