Skip to content

Releases: sumbad/rexy

0.2.0 - 2026-09-03

Choose a tag to compare

@github-actions github-actions released this 02 Sep 16:50

Release Notes

Added

  • --file option for rexy run: TOML rules file for multi-host redirects — several host/path/target rules with per-rule csp_override in one browser session. Excludes --host/--path/--target/--csp-override; an empty rules list logs a warning and runs without redirects.

Fixed

  • CSP override was never applied: request→response correlation state leaked through per-request handler clones (hudsucker reuses the CONNECT-phase instance as the clone source), so the override header silently stayed the target's original one. Correlation now uses overwrite semantics; a regression test emulates the clone chain.
  • Upstream TLS now trusts the OS certificate store instead of only the bundled webpki roots — https:// targets with internal or mkcert CAs no longer fail with invalid peer certificate: UnknownIssuer. Hostname validation is unchanged: the target hostname must match the certificate SANs.

Install rexy 0.2.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sumbad/rexy/releases/download/0.2.0/rexy-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/sumbad/rexy/releases/download/0.2.0/rexy-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install rexy-cli@0.2.0

Download rexy 0.2.0

File Platform Checksum
rexy-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
rexy-x86_64-apple-darwin.tar.xz Intel macOS checksum
rexy-x86_64-pc-windows-msvc.zip x64 Windows checksum
rexy-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
rexy-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

0.1.0 - 2026-09-02

Choose a tag to compare

@github-actions github-actions released this 02 Sep 10:46

Release Notes

Added

  • rexy run command: Launches a Chromium-based browser through a local MITM proxy.
  • Selective PAC routing: A PAC script routes only the intercepted host and its subdomains through the proxy; all other traffic stays DIRECT, so WebRTC calls, CDNs and messengers are unaffected.
  • Browser resolution: --browser accepts chrome, chromium, or a custom executable path.
  • rexy trust / rexy clean commands: Install/remove the Rexy Local CA in the OS trust store on macOS, Windows, and Linux.
  • generate_ca.sh script: One-time local CA generation (EC P-256).
  • --csp-override option for rexy run: Replaces all Content-Security-Policy headers of responses served from --target with the given policy (off removes the header entirely).

Install rexy 0.1.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sumbad/rexy/releases/download/0.1.0/rexy-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/sumbad/rexy/releases/download/0.1.0/rexy-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install rexy@0.1.0

Download rexy 0.1.0

File Platform Checksum
rexy-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
rexy-x86_64-apple-darwin.tar.xz Intel macOS checksum
rexy-x86_64-pc-windows-msvc.zip x64 Windows checksum
rexy-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
rexy-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum