Releases: AikidoSec/firewall-php
Releases · AikidoSec/firewall-php
v1.3.5
v1.3.4
- Improve SQL injection detection (fix false positive)
v1.3.3
- Improve SQL injection detection (fix false positive)
v1.3.2
- Upgraded zen-internals to v0.1.45
v1.3.1
- Re-enabled support for Debian 11, by building on older Ubuntu 20.04 with PHP binaries built from source
v1.3.0
- Added support for setting rate limiting group using
\aikido\set_rate_limit_group
v1.2.0
- Added SQL injection protection for mysqli APIs
v1.1.0
- Protected php_strip_whitespace, highlight_file, SplFileObject and SplFileInfo agains path traversal attacks
- Added support for unconventional IPv4 formats
- Fixed SQL injection bypass by filtering out null bytes
- Upgraded the zen-internals library
v1.0.126
- Fixed golang json unmarshaling issues
- Added limits for API discovery algoritm
- Improved hostname comparison in SSRF algoritm
- Added support for IDN in URL parsing
v1.0.125
- Added a new function called
\aikido\set_token
as an alternative way to pass the token to the Aikido Agent - Re-try loading the .env file from the document root folder if the standard Laravel way does not work