Skip to content

Releases: AikidoSec/firewall-php

v1.3.5

19 Sep 10:52
0befa23
Compare
Choose a tag to compare
  • Propagate AIKIDO_DISK_LOGS env var in order to be loaded even if it's not available at init

v1.3.4

04 Sep 12:43
1513030
Compare
Choose a tag to compare
  • Improve SQL injection detection (fix false positive)

v1.3.3

01 Sep 11:50
81d3de1
Compare
Choose a tag to compare
  • Improve SQL injection detection (fix false positive)

v1.3.2

21 Aug 11:49
801cad1
Compare
Choose a tag to compare
  • Upgraded zen-internals to v0.1.45

v1.3.1

20 Aug 06:17
49f817f
Compare
Choose a tag to compare
  • Re-enabled support for Debian 11, by building on older Ubuntu 20.04 with PHP binaries built from source

v1.3.0

11 Aug 16:31
ac1802c
Compare
Choose a tag to compare
  • Added support for setting rate limiting group using \aikido\set_rate_limit_group

v1.2.0

09 Aug 19:35
7add94c
Compare
Choose a tag to compare
  • Added SQL injection protection for mysqli APIs

v1.1.0

02 Aug 17:26
3a2b11c
Compare
Choose a tag to compare
  • Protected php_strip_whitespace, highlight_file, SplFileObject and SplFileInfo agains path traversal attacks
  • Added support for unconventional IPv4 formats
  • Fixed SQL injection bypass by filtering out null bytes
  • Upgraded the zen-internals library

v1.0.126

15 Jul 14:00
b86d77a
Compare
Choose a tag to compare
  • Fixed golang json unmarshaling issues
  • Added limits for API discovery algoritm
  • Improved hostname comparison in SSRF algoritm
  • Added support for IDN in URL parsing

v1.0.125

03 Jul 18:46
009ccb9
Compare
Choose a tag to compare
  • Added a new function called \aikido\set_token as an alternative way to pass the token to the Aikido Agent
  • Re-try loading the .env file from the document root folder if the standard Laravel way does not work