Releases · Santandersecurityresearch/DrHeader

Added support for requests keyword arguments (method, params, data, json, headers, cookies, auth, timeout, allow_redirects, proxies, verify, cert)

Added support for requests keyword arguments (same as above)
Add the option to configure SSL verification and requests keyword arguments on a per-target basis when bulk scanning
Added a prompt when a scheme is not provided during single scanning
Added shorthand options for all options (not including requests keyword arguments)
POSSIBLE BREAKING CHANGE --verify moved to request args. --verify-enable replaced with --verify
POSSIBLE BREAKING CHANGE --certs/--certificates replaced with --verify path/to/certificate/bundle
POSSIBLE BREAKING CHANGE --json replaced with --output json
POSSIBLE BREAKING CHANGE --rules replaced with --rules-file (for consistency with --rules-uri)

Added error handling so that the whole scan doesn't break if a single target isn't reachable when bulk scanning

Deprecated support for Python <3.8. Added support for Python 3.8 - 3.11
Changed the default HTTP request method from GET to HEAD when retrieving headers from remote endpoint
Add a default timeout of 5 seconds to HTTP requests when retrieving headers from remote endpoint
Default behaviour to follow redirects when retrieving headers from remote endpoint
Added code coverage check to the pipeline (min 80% required)
Use isolated tox environments for pipeline checks & local testing
POSSIBLE BREAKING CHANGE Removed top-level Headers key from the rules specification
POSSIBLE BREAKING CHANGE Changed request_headers argument in main class to headers
POSSIBLE BREAKING CHANGE Moved rules.yml to resources folder
General refactoring & maintenance

Provide feedback