v1.2.36b0
Pre-release
Pre-release
·
19 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
- Add support for Python 3.14 (Only Python builds with GIL enabled)
- Prepare support for multiple data regions
- Add opt-in real-time config updates via SSE (
AIKIDO_FEATURE_SSE=true) - Improve path traversal and SQL/NoSQL injection detection when the request body contains invalid UTF-8 bytes
- Improve SQL injection detection (when user input has leading or trailing whitespace)
- Improve path traversal detection (case-insensitive)
- Improve NoSQL injection detection (when apps merge their own
$operators with user input) - Fix stats, hostname, and user data being discarded when recorded while a sync to the background process was still in progress
- Fix background process failing to start when multiple Gunicorn workers race to remove a stale socket
- Fix per-route IP allowlisting, blocked users, and rate limits not applying yet right after a worker process starts
- Fix bypassed IPs not skipping allowlist/blocklist checks, user blocking, and rate limiting
- Fix outgoing domain ports being reported as text instead of numbers