v0.38.0

What's Changed

• feat: update rule remediation messages by @elsapet in #379

Full Changelog: v0.37.0...v0.38.0

v0.37.0

What's Changed

• feat(js): add mongoDB NoSQLi rule by @elsapet in #381

Full Changelog: v0.36.1...v0.37.0

v0.36.1

What's Changed

• fix(js): non-literal filename rule by @elsapet in #380

Full Changelog: v0.36.0...v0.36.1

v0.36.0

What's Changed

• feat: expand SQLi rules for all GA languages by @elsapet in #378

Full Changelog: v0.35.0...v0.36.0

v0.35.0

Highlight

This release includes changed severity levels for the majority of our rules normalized across all languages by CWE and imapct

What's Changed

• fix: typo in PHP rule description by @elsapet in #372
• feat: normalize rule severity by @gotbadger in #373
• docs: add contributor license agreement by @gotbadger in #374
• fix(java): incorrect android tapjacking rule by @elsapet in #375
• feat(java): expand java SQLi rule by @elsapet in #377

Full Changelog: v0.34.2...v0.35.0

v0.34.2

What's Changed

• fix: clarify permissive regexp rules by @elsapet in #371

Full Changelog: v0.34.1...v0.34.2

v0.34.1

What's Changed

• fix: normalize rule names by @elsapet in #368
• fix(golang): CWE for compression bomb rule by @elsapet in #369
• fix: normalize rule links by @elsapet in #370

Full Changelog: v0.34.0...v0.34.1

v0.34.0

What's Changed

• fix(go): fix go cookie rules by @didroe in #359
• fix(go): include 0oXXX for bad file permission by @elsapet in #364
• fix(golang): fixes following battletesting by @elsapet in #365
• fix: add severity to rule template by @elsapet in #361
• feat(go): add TLS MinVersion rule by @elsapet in #360
• fix(go): QueryContext can take three args by @elsapet in #363
• fix: subproc injection rule by @elsapet in #367

Full Changelog: v0.33.1...v0.34.0

v0.33.1

What's Changed

• fix(ruby): only consider inline disposition as xss for send_data by @didroe in #358

Full Changelog: v0.33.0...v0.33.1

v0.33.0

What's Changed

• feat: go third party rules part 1 by @didroe in #340
• feat(go): add elasticsearch rule by @didroe in #343
• feat(go): add new relic rule by @didroe in #344
• feat(go): add honeybadger rule by @didroe in #345
• feat(go): add open telemetry rule by @didroe in #346
• feat(go): add segment rule by @didroe in #350
• feat(go): add rollbar rule by @didroe in #348
• ci: enable go third party rule tests by @didroe in #349
• feat(go): add sentry rule by @didroe in #352
• feat(go): add google analytics rule by @didroe in #353
• feat(go): add google dataflow rule by @didroe in #354
• fix(ruby): add missing rails XSS send_data case by @didroe in #356
• fix(ruby): add missing URI#read case by @didroe in #355

Full Changelog: v0.32.0...v0.33.0