v1.5.0
·
194 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
What's Changed
- Add realtime settings updates via a persistent server-sent event stream (disabled by default)
- Block home-relative paths in path traversal detection
- Trim trailing dot from hostnames before trusted IMDS host check, preventing false-positive stored-SSRF blocks for GCP IMDS
- Trim user input before SQL injection detection