baidu/openrasp v1.0.0-RC1

Version 1.0.0 RC1

on GitHub

中文说明

New features

Java agent

• Add hooks of okhttp/okhttp3 library

General improvements

• Add remote management capability
• Add tag field in syslog output
• Added native LRU implementation
  • Effective for sql, ssrf, readFile, writeFile hooks only

Breaking changes

PHP agent

• Finally removed support of Windows server

Algorithm improvements

Command injection

• Add a simple Bash/CMD parser to detect command injection attacks
• Block JBoss EL based command execution attacks

Bug fixes

Java agent

• Fix a null pointer exception in Dubbo RPC hook

PHP agent

• Fix a segfault in PHP mysql session handler