baidu/openrasp v0.42

Version 0.42

on GitHub

中文说明

Breaking changes

• No longer monitor SQL slow queries
• Dubbo RPC parameter name changed from openrasp-dubbo-X to dubbo-X

New features

• Add request_method field in alarm logs

Bug fixes

• Fixed the No modifications are allowed to a locked ParameterMap error in certain Tomcat versions

Algorithm improvements

Rename

• Resolved a potential false positive in rename_webshell algorithm

Deserialization

• Add detection of commons.collections4 payload