Skip to content

WebVigil 1.0.4

Choose a tag to compare

View all tags
@ryanvmorais ryanvmorais released this 09 Oct 00:41
· 19 commits to main since this release
v1.0.4
b17fd1e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A patch release with one fix: a robots.txt, a sitemap or a page served by the scanned site can no longer keep a scan busy for a long time or make it use a lot of memory.

  • The crawl reads at most 20 sitemaps and 10,000 sitemap URLs, 20,000 links per page, 500 forms per page and 1,000 controls per form, and keeps at most 2,000 forms and a bounded set of URLs seen.
  • The pages fetched are the same while max_pages is within those limits, and a scan warning says when a limit was reached.
  • A link, a form or a sitemap past a limit is left out.
  • Upgrade with pip install -U webvigil or pull ghcr.io/ryanvmorais/webvigil:1.0.4. Nothing in the CLI, the exit codes, the configuration keys, the check ids or the JSON report changes.

Use WebVigil only on systems you own or are authorized in writing to test.

Security advisory: GHSA-63j8-4f3v-r77j

Full list of changes: CHANGELOG.md

Assets 2
Loading