Skip to content

Latest commit

 

History

History
206 lines (160 loc) · 8.35 KB

CHANGELOG.md

File metadata and controls

206 lines (160 loc) · 8.35 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Unreleased

0.19.0 - 2024-05-07

Changed

  • Update minimum ZAP version to 2.15.0.
  • Disable the HUD by default - it still works but its flaky, and currently not a focus for us.

0.18.0 - 2023-10-12

Changed

  • Update minimum ZAP version to 2.14.0.

Fixed

  • Update displayed time format to include leading zeros (Issue 1256).

0.17.0 - 2023-07-11

Changed

  • Update minimum ZAP version to 2.13.0.

0.16.0 - 2023-01-25

Added

  • Added Clear Button to History and WebSockets Tab (Issue 411).

Fixed

  • Prevent exception if no display (Issue 3978).

0.15.0 - 2022-10-27

Changed

  • Use stats instead of bitly for telemetry
  • Update minimum ZAP version to 2.12.0.

0.14.0 - 2022-09-22

Added

  • Added accessibility fixes for rapid navigation between panels.
  • Added semantic roles and better labelling for screen reader users.

Changed

  • Update minimum ZAP version to 2.11.1.
  • Depend on Network add-on for the tutorial server.

Fixed

  • Problems with Firefox 103+
  • Spider status post 2.11.1

0.13.0 - 2021-10-06

Changed

  • Update minimum ZAP version to 2.11.0.
  • Clarify resend tutorial instructions. #861
  • Update dependencies.

Fixed

  • Fix typo in tutorial.
  • Added initial accessibility fixes for modals and tabs

0.12.0 - 2020-10-15

Fixed

  • Problems with Firefox 81 due to referer header not being set cross domain. #815

0.11.0 - 2020-08-06

Added

  • Minimal telemetry implementation and config option

Changed

  • To use ZAP 2.9.0 jar for access to the latest features

0.10.0 - 2020-02-04

Changed

  • Changed HUD toolbar icon to add a target overlay when 'only in scope' option enabled.
  • Change cursor to pointer on clickable elements
  • Tweak break task tutorial wording

0.9.0 - 2020-01-15

Added

  • Add info and repo URLs to the add-on manifest.

Fixed

  • Alerts open with correct active tab in other supported languages besides English (ie French). #235

0.8.0 - 2019-11-25

Added

  • Added 'Toggle Script' tool, allowing user-made scripts to be toggled on and off from the HUD #335
  • Tweet link on completing the tutorial
  • Comments tool which shows all of the HTML comments on a page #378

Fixed

  • Dialogue windows close properly when the Escape key is pressed #71
  • Sites upgraded to https fail if 'only in scope' switched on #316

0.7.0 - 2019-10-07

Changed

  • Cleaned up injected code

0.6.0 - 2019-08-12

Changed

  • Hide drawer at the same time as the side panels #552

Fixed

  • Correct Content-Length of upgraded responses.

0.5.0 - 2019-07-24

Added

  • Support for the Ajax Spider, including new tutorial page
  • Tutorial page explaining the HTTPS upgrade #439
  • A config page option for showing the changelog #535
  • Icons to indicate changes to the tutorial or changelog #553

Fixed

  • Direct AJAX calls not getting upgraded to https #530
  • Fail to handle ws calls from an upgraded http domain #525

0.4.0 - 2019-06-07

Added

  • Add css transitions to tool buttons so that they slide out when hovered over.
  • Support for WebSockets
    • Add a lower tab that shows all of the WebSocket messages proxied through ZAP
    • Add dialog which shows the full WebSocket message when selected in the table with the option to replay it
    • Support breaking on WebSocket messages with the option to change or drop them
  • Added 'Info / Low / Medium / High' qualifications to the buttons of the Page and Site tools.
  • Add the option to launch the tutorial again from the HUD configuration page
  • Add a tutorial page for the HUD Configuration options
  • Command line options '-hudurl ' and '-hudbrowser '

Changed

  • Depend on newer version of Selenium add-on.

Fixed

  • Offset the growl alerts so that they don't block access to the buttons on the lower tab
  • The UI configs are now persisted to ZAP #321
  • Add a beforeDestroy to all Vue components that register listeners on the custom eventBus. #468
  • Replay in Console was broken #487

0.3.0 - 2019-02-11

  • Many thanks to Matt Austin (@mattaustin) for reporting security vulnerabilities with the HUD and working with us to fix them.

Added

  • Add API endpoints for getting and setting UI options. #319
  • Add tasks for Enable, Show and Break tutorial pages
  • Add plain text/regex filtering capability to History section #233
  • Add tutorial index page #333
  • Add tutorial pages for tool configuration and the HTML report tool.
  • Add -hud ZAP command line option which launches Firefox configured to proxy through ZAP with the HUD enabled, for use in daemon mode

Fixed

  • Correct handling of upgraded domains on startup. #162
  • Stop the tutorial server when the add-on is uninstalled.
  • Perform stricter validation and filtering on messages from the target domain.

Changed

  • Use websockets instead of HTTP for all ZAP API calls
  • Replaced link to ZAP User Group with one to the new ZAP HUD group and added a desktop menu item for it.
  • Refresh HUD iframes individually instead of refreshing whole page

0.2.0 - 2018-12-31

Added

  • Add option to control on-domain messages. #294
  • Add HTML report tool. #312
  • Require cookie on all API calls
  • Promoted to beta

Changed

  • Changed Attack Mode icon to crosshairs. #221

Fixed

  • Upgraded vue.js to 2.5.21 and vue-i18n to 8.5.0

0.1.2 - 2018-12-17

Fixed

  • Fix bug where field alert flags don't show alert dialog. #290

0.1.1 - 2018-12-06

0.1.0 - 2018-12-03

First alpha release.