2.1 Release

[liquidsec]

Summary

Release 2.4.0.

Features

• Disable negative signatures (Add option to disable negative signatures #891) — new --disable-negative-signatures CLI flag and matching disable_negative_signatures kwarg. When set, generic dangling CNAME/NS findings fire even for known non-exploitable services (Cloudflare, Akamai, etc.) that would normally be suppressed by negative signatures.
• MX gate for email modules (Gate DMARC/SPF/MTA-STS on MX presence to reduce noise #892) — DMARC, SPF, and MTA-STS misconfiguration checks now skip when the target and its registered (apex) domain both have no MX records, since these checks are largely irrelevant for domains that don't receive mail. MTA-STS dangling-subdomain takeover and policy-MX WHOIS takeover findings still run unconditionally. Opt-out via --disable-mx-gate / disable_mx_gate kwarg. New BadDNS_email_base intermediate class encapsulates the shared MX-presence logic.

Fixes & maintenance

• get_all_modules() now walks transitive subclasses and filters on the name class attribute, so intermediate bases aren't returned as modules.
• pyfakefs/certifi regression in CNAME tests fixed via an autouse conftest fixture that exposes the real certifi CA bundle into the fake filesystem, restoring tldextract's snapshot fallback.
• Added a PyPI version badge to the README.

Dependency bumps

• urllib3 2.6.3 → 2.7.0 (Bump urllib3 from 2.6.3 to 2.7.0 #886)
• pymdown-extensions 10.21.2 → 10.21.3 (Bump pymdown-extensions from 10.21.2 to 10.21.3 #887)
• idna 3.11 → 3.15 (Bump idna from 3.11 to 3.15 #888)

[codecov-commenter]

Codecov Report

❌ Patch coverage is 98.59155% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 99.94%. Comparing base (4d81259) to head (e0370d8).

Files with missing lines	Patch %	Lines
baddns/lib/email_base.py	97.14%	1 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff             @@
##              main     #890      +/-   ##
===========================================
- Coverage   100.00%   99.94%   -0.06%     
===========================================
  Files           26       27       +1     
  Lines         1924     1977      +53     
===========================================
+ Hits          1924     1976      +52     
- Misses           0        1       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.