v0.0.55

What's Changed

• fix: header bypass on tls terminate proxy by @r-ushil-gsa in #296
• Don't let denyWrite unmask denyRead tmpfs dirs by @poteat in #305
• Preserve explicitly-empty allowlist in getNetworkRestrictionConfig by @poteat in #306
• Give request-filter tests a budget above their curl watchdog by @poteat in #308
• Re-apply denyRead file masks after a denyWrite ancestor bind by @poteat in #309
• Authenticate the loopback proxy and add deny-all + strictAllowlist by @poteat in #310
• Re-emit denyRead paths nested under allowRead on macOS by @poteat in #311
• Release v0.0.55 by @poteat in #307

New Contributors

• @r-ushil-gsa made their first contribution in #296

Full Changelog: v0.0.54...v0.0.55