Releases: sumbad/rexy
Releases · sumbad/rexy
Release list
0.2.0 - 2026-09-03
Release Notes
Added
--fileoption forrexy run: TOML rules file for multi-host redirects — severalhost/path/targetrules with per-rulecsp_overridein one browser session. Excludes--host/--path/--target/--csp-override; an empty rules list logs a warning and runs without redirects.
Fixed
- CSP override was never applied: request→response correlation state leaked through per-request handler clones (hudsucker reuses the CONNECT-phase instance as the clone source), so the override header silently stayed the target's original one. Correlation now uses overwrite semantics; a regression test emulates the clone chain.
- Upstream TLS now trusts the OS certificate store instead of only the bundled webpki roots —
https://targets with internal or mkcert CAs no longer fail withinvalid peer certificate: UnknownIssuer. Hostname validation is unchanged: the target hostname must match the certificate SANs.
Install rexy 0.2.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sumbad/rexy/releases/download/0.2.0/rexy-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/sumbad/rexy/releases/download/0.2.0/rexy-installer.ps1 | iex"Install prebuilt binaries into your npm project
npm install rexy-cli@0.2.0Download rexy 0.2.0
| File | Platform | Checksum |
|---|---|---|
| rexy-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| rexy-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| rexy-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| rexy-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| rexy-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
0.1.0 - 2026-09-02
Release Notes
Added
rexy runcommand: Launches a Chromium-based browser through a local MITM proxy.- Selective PAC routing: A PAC script routes only the intercepted host and its subdomains through the proxy; all other traffic stays
DIRECT, so WebRTC calls, CDNs and messengers are unaffected. - Browser resolution:
--browseracceptschrome,chromium, or a custom executable path. rexy trust/rexy cleancommands: Install/remove the Rexy Local CA in the OS trust store on macOS, Windows, and Linux.generate_ca.shscript: One-time local CA generation (EC P-256).--csp-overrideoption forrexy run: Replaces allContent-Security-Policyheaders of responses served from--targetwith the given policy (offremoves the header entirely).
Install rexy 0.1.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sumbad/rexy/releases/download/0.1.0/rexy-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/sumbad/rexy/releases/download/0.1.0/rexy-installer.ps1 | iex"Install prebuilt binaries into your npm project
npm install rexy@0.1.0Download rexy 0.1.0
| File | Platform | Checksum |
|---|---|---|
| rexy-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| rexy-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| rexy-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| rexy-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| rexy-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |