Skip to content

v1.5.0

Choose a tag to compare

@marksmith marksmith released this 29 Jun 13:31
· 194 commits to main since this release
Immutable release. Only release title and notes can be modified.
ab87d58

What's Changed

  • Add realtime settings updates via a persistent server-sent event stream (disabled by default)
  • Block home-relative paths in path traversal detection
  • Trim trailing dot from hostnames before trusted IMDS host check, preventing false-positive stored-SSRF blocks for GCP IMDS
  • Trim user input before SQL injection detection