Skip to content

1.67

Latest

Choose a tag to compare

@rfc-st rfc-st released this 09 Oct 19:46
· 13 commits to master since this release

These are the release notes of the latest version of humble and, as always, a recommendation that I hope will be to your liking: 'B.B. King - Sweet Sixteen'.

Thank you for downloading it, for trying it and for your time!

Security

90dc741 - Fix HTTP Response Splitting

Fixes

cca0b54 - 'Permissions-Policy' parsed as a dict; invalid syntax reported
496e498 - Report TLS/SSL handshake errors instead of crashing
5e366c5 - Deterministic order of unsupported headers
a1cbb83 - X-Permitted-Cross-Domain-Policies directives
c1dc53d - X-Permitted-Cross-Domain-Policies references
a127cfa - Use one path for the analysis history file
6a64e39 - X-Permitted-Cross-Domain-Policies l10n references
61e1e4b - Parse status lines with a reason phrase in input files
6a5babf - Report CSP 'Incorrect Hash' once per policy
ed5f547 - Stray spaces in HTML export of 'no headers' line
cab4dd7 - Do not erase terminal lines on '-cicd' error paths
eb35e53 - Related to errors, validations and logic
c124ce6 - Related to dead code/checks/logic. Check extended commit message.
792dfca - Related to errors and spelling. Check extended commit message.

Features

040edf2 - 1 new fingerprint header
0203e30 - 2 new unit tests
127f815 - 4 new features. Check extended commit message.
21639a1 - 1 new unit test and improved '-v' check
da29ca2 - 3 new features. Check extended commit message.
a761492 - XML export significantly improved
3f573bd - 7 new insecure checks

Minor

a9a75b2 - Code optimizations related to Content-Security-Policy
107eddc - Move headers checks from the main flow into their own functions
fa7df00 - Updated docstring in the 'header_eligible' function
24d95ed - Align 'insecure.txt' titles with the reported findings
28645f1 - Removed orphaned entries from l10n files
03fb297 - Declare refurb's Python 3.11 floor and mypy args in pyproject
2b55616 - Removed dead code
96f710f - Optimized test file
2a45cf5 - Removed dead code
e7794b9 - Removed dead code in unit test file
66c31fa - Removed dead code and improved '-grd' output
d2ce5bf - Exit with an error on HTTP exceptions
81ee425 - Fix indentation
c629476 - Removed dead code
7d78238 - Code optimizations. Check extended commit message.
608330a - Updated experimental HTTP response headers
0ee9c5a - Better messages with the '-v' option
3dd53b4 - Code optimizations aimed at reducing lines of code

Full changelog: 1.66...master