Skip to content

0.9.4
Compare
Choose a tag to compare
@DigitalTrustCenter DigitalTrustCenter released this 11 Jul 13:06
· 2 commits to main since this release
0.9.4
fee9d4f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

A new version which resolves the following issues:

#70 cgi will be removed in Python 3.1:
cgi is deprecated and has been replaced with the recommended replacement.

#72 Invalid responses are not handled properly
Redirects are allowed but in the case of a redirect to a different path it should log the error that the security.txt was not found on the correct location. A global redirect to an html will cause the library to want to parse that page even if that makes no sense anymore. This has been resolved.

#73 add emails and urls properties
We have added properties on the SecurityTXT object which can be used to retrieve the first found or all of the emails, urls or phone numbers listed in the Contact field

#74 Certain security.txt files can cause parser to hang indefinitely
If the security.txt has a PGP block we check for any issues and log these if found. The library used for this is the PGPy library. Certain input however has been found to cause the library to hang indefinitly.
The possible cause for this issue has been found and a pull request has been opened on this library. For now we resolve the issue by using the specific pull request of the PGPy library. When the PGPy library updates and resolves this issue we will update to that version.

Assets 2
Loading