Bug Fixes
- core: fixed empty strings being kept as valid values in config (#3952)
- appsec: fixed reuse of
requestOptions
object (#3959)
Improvements
- appsec: Appsec reporter now collects the x-amzn-trace-id header (#3984)
- iast: Added support for weak randomness vulnerability (#3960)
- iast: Ignore header vulnerabilities in cors headers (#3962)
- profiler: Added timelines env var, disabled timelines and CPU profiler on Windows (#3969)
- profiler: Disabled OOM monitoring by default on Windows (#3974)