Skip to content

v5.1.0

Compare
Choose a tag to compare
@szegedi szegedi released this 24 Jan 16:02
· 688 commits to master since this release

Bug Fixes

  • core: fixed empty strings being kept as valid values in config (#3952)
  • appsec: fixed reuse of requestOptions object (#3959)
  • appsec: Fix WAF crash inside worker_threads

Improvements

  • appsec: Appsec reporter now collects the x-amzn-trace-id header (#3984)
  • iast: Added support for weak randomness vulnerability (#3960)
  • iast: Ignore header vulnerabilities in cors headers (#3962)
  • profiler: Added timelines env var, disabled timelines and CPU profiler on Windows (#3969)
  • profiler: Disabled OOM monitoring by default on Windows (#3974)