What's Changed
- ci: drop the redundant git install from the legacy test job by @MegaManSec in #97
- ci: pin the legacy test containers by digest by @MegaManSec in #98
- feat(cli): fail gracefully on invalid config with a distinct exit code by @MegaManSec in #96
- fix(formatters): catch UnicodeDecodeError in to_text Jinja filter by @MegaManSec in #83
- fix(host_spoofing): detect attacker-controlled variables in concatenated Host values by @MegaManSec in #85
- fix(parser): break include cycles in nginx -T dump mode by @MegaManSec in #87
- fix(origins): don't crash on PCRE-only regex syntax in origin/referer patterns by @MegaManSec in #88
- fix(http_splitting): analyze single-argument return URL redirects by @MegaManSec in #90
- fix(status_page_exposed): don't trust auth under satisfy any with a universal allow by @MegaManSec in #91
- fix(add_header_redefinition): also flag add_trailer redefinition by @MegaManSec in #95
- fix(core): treat maps without a default entry as not guaranteeing any value by @MegaManSec in #92
- add proxy_set_header_redefinition module by @makarov05bm in #81
- fix(proxy_pass_normalized): ignore rewrites nested in if blocks by @MegaManSec in #89
- fix(proxy_pass_normalized): match mitigation variables exactly by @MegaManSec in #94
- fix(default_server_flag): detect servers with no listen directive by @MegaManSec in #86
- tests(unnamed_groups): pin that if-tested captures are not flagged by @MegaManSec in #100
- fix(default_server_flag): normalize 0.0.0.0 to wildcard listen key by @MegaManSec in #82
- feat: add ssl_ecdh_curve and ssl_stapling_letsencrypt checks by @MegaManSec in #99
- style(proxy_set_header_redefinition): wrap the options_help strings by @MegaManSec in #101
- style: wrap long lines to the project's 120-column limit by @MegaManSec in #102
- fix(origins): report examples in a stable order by @MegaManSec in #103
- ci: enforce the project's flake8 style gate by @MegaManSec in #104
- docs(return_bypasses_allow_deny): the recommended fix did not work by @MegaManSec in #105
- Release 0.7.0 by @MegaManSec in #106
New Contributors
- @makarov05bm made their first contribution in #81
Full Changelog: v0.6.0...v0.7.0