github baidu/openrasp v1.2.0
Release 1.2.0

latest releases: v1.3.7, v1.3.6, v1.3.5...
4 years ago

中文说明
国内下载

Breaking changes

  • Removed enforce_policy from config options
  • Removed monitoring of MySQL duplicated key error

New features

General changes

  • Automatically synchronize server hostnames
  • Add detection of containers, stored in host_type field

Plugin system

  • Add requestEnd checkpoint
  • Add RASP.request method
  • Add RASP.agent_version field
  • Add context.requestId and many other fields
  • Add dest_path/dest_realpath field to fileUpload checkpoint (PHP only)
  • Add monitoring of loadLibrary events

PHP agent

  • Add eval/assert hooks

Java agent

  • Improved XSS detection algorithm on Tomcat servers
  • Add validation of requestEnd/request.getParameterMap hooks

RASP Installer

  • Add support of Tomcat installed via yum
  • Add partial support of SpringBoot servers

Bug fixes

Java agent

  • Added support of JRockit JDK (32/64)
  • Fixed a compatibility issue with org.elasticsearch.client.RestClient
  • Fixed a XXE compatibility issue with taglib
  • Removed V8 library execstack warning

Don't miss a new openrasp release

NewReleases is sending notifications on new releases.