Release-1.9.0

Feature

• Improved the method pool information collected by the agent, and is compatible with previous versions.
• Added highlight display of taint range.
• Added detection logic compatible with agent v3 version method pool.
• Added a timeout mechanism for vulnerability verification.
• Added timeout mechanism for replay.
• Added API for unified distribution of agent configuration.
• Fixed display bug #1058 reported by the community @onesecurity
• Fixed the problem that the weak encryption vulnerability is not displayed after re-reporting after deletion.
• Removed hook rules causing false negatives.

What's Changed

• fix(hookstrategy): fix hook_profilesv2 api type 4 by @Bidaya0 in #1055
• fix(hookstrategy): remove error strategy . by @Bidaya0 in #1057
• fix(hookstrategy): fix hook_profilesv2 api language filter. by @Bidaya0 in #1056
• build(logger): disable departured logger. by @Bidaya0 in #1060
• feat: lifecycle by @tscuite in #1061
• feat: Compatible with kubernetes version 1.16 by @tscuite in #1065
• fix(typing): fix None return in get_hook_type function. by @Bidaya0 in #1066
• build(deps): lock deps. by @Bidaya0 in #1067
• feat: Added independent pv version by @tscuite in #1072
• fix(scan):indexerror when method pool sink acnode . by @Bidaya0 in #1074
• debug(scan): add debug command to test scan . by @Bidaya0 in #1076
• ci(unittest): fix env setup in ci . by @Bidaya0 in #1077
• ci(test): merge test state all in one. by @Bidaya0 in #1079
• feat(systemsettings): add system setting for agent api . by @Bidaya0 in #1080
• feat(systemsettings): add system setting for agent api . by @Bidaya0 in #1081
• feat(systemsettings): change api . by @Bidaya0 in #1083
• feat(method pool): add compatibility to v3 method_pool. by @Bidaya0 in #1082
• Feat/url blacklist by @Bidaya0 in #1084
• feat(method pool): add compatibility to get resbody for v3 method_pool. by @Bidaya0 in #1085
• build(deps): lock stub pyyaml. by @Bidaya0 in #1087
• fix(typing): add typing hint for handler. by @Bidaya0 in #1086
• feat(method pool): add compatibility to parse taint position. by @Bidaya0 in #1088
• feat(url_blacklist): add operator to header key. by @Bidaya0 in #1089
• fix(taint_position): fix taint_position in version 3 method_pool . by @Bidaya0 in #1090
• feat(method pool): add compatibility to display and new highlight range. by @Bidaya0 in #1091
• fix(normal_vul): fix distinct logic confilct with is_del . by @Bidaya0 in #1092
• feat(method pool): add compatibility to display and new highlight range. by @Bidaya0 in #1093
• feat(method pool): add compatibility to display and new highlight range. by @Bidaya0 in #1094
• fix(hook_strategy): remove unnessary strategy which cause fake positive. by @Bidaya0 in #1095
• fix(display): fix method_pool display. by @Bidaya0 in #1096
• fix(display): fix method_pool display. by @Bidaya0 in #1097
• feat(hookstrategy): add experimental feature auto updatre strategy. by @Bidaya0 in #1098
• fix(recheck): add auto expire time in recheck. by @Bidaya0 in #1099
• fix(recheck): add auto expire time in recheck. by @Bidaya0 in #1100
• fix(display): fix method_pool display with old version data. by @Bidaya0 in #1101
• fix(recheck): add auto expire time in method_pool replay. by @Bidaya0 in #1102

Full Changelog: v1.8.7...v1.9.0