v0.58.0: 8 New Security Tools (438 Total)
·
23 commits
to main
since this release
What's New in v0.58.0
8 New Security Analysis Tools
- host_header_injection - Analyze Host header injection: Host validation, redirect URLs, cache key poisoning.
- csv_formula_injection - Analyze CSV formula injection: export protection, formula prefix, cell escaping.
- log_forging_risk - Analyze log forging: newline stripping, control characters, sanitization.
- missing_csp_directive - Analyze missing CSP directives: default-src, unsafe-inline, fallback directives.
- insecure_cookie_scope - Analyze insecure cookie scope: domain, path, subdomain exposure.
- tabnabbing_risk - Analyze tabnabbing: target=_blank, window.opener, opener navigation.
- subresource_integrity - Analyze subresource integrity: SRI hash, external scripts, CDN resources.
- missing_permissions_policy - Analyze missing Permissions-Policy: camera, microphone, geolocation restrictions.
Total: 438 tools