v1.1.1

What's Changed

• Include API token hash in the detached agent socket path
• Fix SSRF detection for invalid URIs
• Prepend "." to payload paths

v1.1.0

What's Changed

• Add bot blocking and monitoring
• Log updated runtime settings only when updated

v1.0.8

What's Changed

• Fix stored SSRF attack detection when the address is the hostname
• Exclude unknown payload properties from attack data to avoid displaying them as "unknown" in the Aikido dashboard

v1.0.7

What's Changed

• Fix undefined request method in ActionController sink when triggered from ActionMailer callbacks

v1.0.6

What's Changed

• Improve background worker logging with formatted exception class and message, and backtrace for debugging
• Clarify hardened method configuration documentation
• Simplify configuration documentation by removing rarely used middleware insertion

v1.0.5

What's Changed

• Make middleware anchor point configurable
• Anchor middleware after ActionDispatch::Executor by default

v1.0.4

What's Changed

• Improve middleware registration reliability by anchoring after Rails::Rack::Logger middleware

v1.0.3

What's Changed

• Prevent recursive computation of Aikido::Zen::Context#protection_disabled in route constraints

v1.0.2

What's Changed

• Control blocking mode at runtime through the Aikido dashboard
• Support global bypass list for allowed IPs (individual IPv4 and IPv6 addresses and CIDR ranges)
• Match wildcard endpoints by verbs and paths
• Report outbound hostname hits
• Include clean stack traces in attack reports
• Fix non-string value bypasses for SQL injection, path traversal, and shell injection
• Fix path formatting bypass for allowed IP address check
• Fix SSRF attack metadata port type
• Fix reporting attacks without request context
• Rename environment variable AIKIDO_DISABLED to AIKIDO_DISABLE
• Upcase HTTP method in events

v1.0.2.beta.10

What's Changed

• Support disabling method hardening via AIKIDO_HARDEN=false or Aikido::Zen.config.harden = false
• Add fallback for File.join when method hardening is disabled