What's Changed
- fix: remove client-supplied
X-Anubis-*header spoofing vector by @JasonLovesDoggo in #1919 - fix(lib): Don't log challenge twice by @dwhitemv25 in #1922
- fix(ssh-ci): minor fixes to appease CI by @Xe in #1923
- docs(blog): add post about WASM in Anubis by @Xe in #1941
- fix(lib): Clarify getChallenge error log by @dwhitemv25 in #1942
- build(deps): bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9 in the github-actions group by @dependabot[bot] in #1945
- build(deps-dev): bump the npm group with 4 updates by @dependabot[bot] in #1943
- docs: fix typo by @Coobyk in #1928
- fix: restore original Referer across the challenge redirect by @fabianpeusser in #1926
- fix(lib): validate subrequest authentication redirects consistently by @nijel in #1947
- build(deps): bump the gomod group across 1 directory with 8 updates by @dependabot[bot] in #1944
- feat: challenge extensions by @Xe in #1962
- fix(lib): use the configured deny status for non-gzip challenge clients by @bhcopeland in #1958
New Contributors
- @Coobyk made their first contribution in #1928
- @fabianpeusser made their first contribution in #1926
- @bhcopeland made their first contribution in #1958
Full Changelog: v1.28.0-pre1...v1.28.0-pre2