Skip to content

v1.2.37b0

Pre-release
Pre-release

Choose a tag to compare

@hansott hansott released this 06 Oct 14:23
· 77 commits to main since this release
Immutable release. Only release title and notes can be modified.
  • Adds support for XML parsing when the XML is passed as bytes instead of a string
  • Zen now also inspects headers and query strings in ASGI apps that use a charset other than UTF-8
  • Improves detection of attacks in very deeply nested request data
  • Improves NoSQL injection detection in very deeply nested request data
  • Fixes attack waves missing from the statistics reported to Aikido
  • Speeds up SQL injection checks
  • Reduces the data exchanged between app workers and Zen's background process
  • Sends the first heartbeats earlier after startup, at 30 seconds and 2 minutes
  • Aligns timeouts for calls to Aikido with the other Zen agents