fix: validate header names/values and prevent CRLF injection (#1817) - #2442

Closed

SaumyaT-21 wants to merge 948 commits into

utksh1:mainfrom

SaumyaT-21:fix/44-crawler-header-validation

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 30, 2026

docs(api): document notification rule conflict contract
aarushlohit
committed
c645a75
Merge branch 'main' into fix/sidebar-keyboard-accessibility-557
SathvikaSingoti
authored
738d835
test: cover vault owner authorization
HitanshiThakar
committed
488835a
style: fix spacing in vault authorization route
HitanshiThakar
committed
bdac411
feat: add multi-format report template system (#255)
Shikhar-404exe
committed
8746f45
fix: HTML-escape all dynamic values in renderPreview to prevent XSS
Shikhar-404exe
committed
cd15817
Merge branch 'main' into ci/doc-link-validation-884-clean
riyanshigupta890-cloud
authored
fa80d9e

Commits on Jul 1, 2026

Commits on Jul 2, 2026

docs: update browser auth session flow (#1555)

Tomeshwari-02
and
Tomeshwari-02
authored
9edf153
test(secret_scanner): add parser fallback coverage (#1556)
deepsikha-dash
authored
846d190
feat(validation): introduce string length constraints on policy, profile, and workflow endpoints (#1557)
Rafiaminhaj
authored
604e4e5
test: add unit tests for executor_target_helpers.extract_target (#1563)
tmdeveloper007
authored
5cb0dd4
test: add unit tests for wpscan plugin parser helpers (#1564)
tmdeveloper007
authored
09c55a7
test: add unit tests for hashcat plugin parser (#1565)
tmdeveloper007
authored
d95c69a
test: add unit tests for port-scanner plugin parser (#1566)
tmdeveloper007
authored
1369bac
test: add unit tests for virtual-host-finder plugin parser (#1567)
tmdeveloper007
authored
2a6adf7
feat(zap_scanner): replace placeholder connector with ZAP baseline command
deepsikha-dash
committed
b64a68a
fix: sse toctou race (#1523)
ionfwsrijan
authored
4b7bdc0
fix: notification history bola (#1522)
ionfwsrijan
authored
a12f939
fix: concurrency limiter corruption (#1521)
ionfwsrijan
authored
74a3b0a
test(yara_scan): add parser unit tests
deepsikha-dash
committed
f0cbdff
test: add unit tests for useVirtualList hook behavior
jiya2401
committed
b85d223
fix: remove trailing whitespace
jiya2401
committed
5d5cfc5
test: authenticate settings e2e via session check
Tomeshwari-02
committed
cc4f9bc
fix: include credentials on task streams
Tomeshwari-02
committed
d725d39
fix: log out during settings purge
Tomeshwari-02
committed
5cb653c
test: include all Playwright e2e specs
Tomeshwari-02
committed
76020b5
test: extract and test iter_raw_output_chunks from routes.py
tmdeveloper007
committed
f737410
fix: re-export SSE_RAW_OUTPUT_CHUNK_SIZE for integration test compatibility
tmdeveloper007
committed
c3d2e07
test: add null-byte and edge case tests for JSONFormatter
tmdeveloper007
committed
3fa1651
test: add boundary case tests for effective_capabilities and CapabilityEnforcer
tmdeveloper007
committed
1e4e485
test: add IPv6, credential, fragment, and encoding edge cases for _parse_url_hostname
tmdeveloper007
committed
366cb38
test: add Unicode and long-string edge case tests for redact()
tmdeveloper007
committed
e64e4bb
test: add special-character and concurrency edge cases for RequestIDMiddleware
tmdeveloper007
committed
afe58ee
ci: block committed Python cache files
anshikaagr
committed
22d848b
Type Framer Motion spring transitions without as-any casts (#1409)
jiya2401
committed
69386b4
test: add cross-file markdown link validation
shivanshanand
committed
72ae8f2
Deleted a file which was not related to this issue.
Rakshak05
committed
6e97fd9
Merge branch 'main' into issue-#1424
Rakshak05
authored
666ead7
feat: frontend auth flow
madsysharma
committed
3a9c57e

Commits on Jul 3, 2026

Commits on Jul 4, 2026

Commits on Jul 5, 2026

Commits on Jul 6, 2026

Commits on Jul 7, 2026

Commits on Jul 8, 2026

fix(security): isolate plugin parser subprocess network
anshul23102
committed
cbab7b8
fix: report webhook redirects as failures instead of silent success
namann5
committed
8c6963f
test(nikto): add malformed-output tests for parser fallback paths

NaitikVerma6776
and
cursoragent
committed
f34d526
feat(backend): add migration tracking and schema version validation
deepsikha-dash
committed
67c8929
refactor(TaskDetails): replace chart and map callback any usage

NaitikVerma6776
and
cursoragent
committed
cdcc2d3
refactor(Scans): replace task inputs any with ScanInputs type

NaitikVerma6776
and
cursoragent
committed
5f8be91
fix(plugins): reject declared signatures when signing key is missing

NaitikVerma6776
and
cursoragent
committed
8dd6428
Resolves issue-#1402
Rakshak05
committed
d42e230
Resolves issue-#35
Rakshak05
committed
b4934eb
Fix trailing whitespaces
Rakshak05
committed
b4e2520
Fix vault regex alternation and correct preview route unit test inputs
Rakshak05
committed
45f3413

Commits on Jul 9, 2026

Commits on Jul 13, 2026

Commits on Jul 14, 2026

Fix: add auth and owner isolation to saved views API (closes #1743)
Your Name
committed
5c5f8fa
fix: avoid confidence boost for unknown fingerprint strength (#2017)
Aish-kul16
authored
12b4f41
Merge branch 'main' into fix-saved-views-1743
S0412-2007
authored
59bd5d7

Commits on Jul 17, 2026

Commits on Jul 20, 2026

Resolves issue-#1414
Rakshak05
committed
b73e2e8
fix(plugins): enforce strict validation for missing custom parser & add test suite
i-OmSharma
committed
0ad8323
test(tls): resolve httpx client.stream context manager mock leak and type errors
i-OmSharma
committed
4181b82
Merge pull request #2041 from i-OmSharma/feature/plugins-custom-parser-validation
utksh1
authored
06a5a91
Merge pull request #2040 from username/fix-tls-verification-tests
utksh1
committed
4f9416b
Merge main into PR #2039
utksh1
committed
11d70b2
fix(security): add usedforsecurity=False to SHA1 hashing for non-crypto ID generation
utksh1
committed
b4dd06d
fix: redact target field and recursively redact evidence (#17)
sahare77
committed
5fb61e0
Merge main into PR #2038
utksh1
committed
0fdc994
Merge main into PR #2037
utksh1
committed
a4d5f1e
test: update test_settings_default_debug to expect False
utksh1
committed
c5efeca
test: override auth dependency in saved_views tests
utksh1
committed
a6bea4e
Merge branch 'fix/auth-bypass-saved-views'
utksh1
committed
973c80c
Merge main into PR #2042
utksh1
committed
e5f19f3
Merge branch 'main' into fix-saved-views-1743
S0412-2007
authored
a0c75d0

Commits on Jul 21, 2026

fix(backend): standardize timezone handling to UTC ISO-8601

NaitikVerma6776
authored and
cursoragent
committed
3d1a1ce
fix(backend): preserve UTC micros and update TLS stream mocks

NaitikVerma6776
authored and
cursoragent
committed
396a889
Fix #1748: make cloud-metadata/private-range denylist non-overridable

Contributor
authored and
Your Name
committed
391cbc6

Commits on Jul 22, 2026

Commits on Jul 24, 2026

test(scapy_recon): add parser regression tests (#1710)
Khanvilkarshravani27
authored
c0d5b5e

Commits on Jul 30, 2026

Fix/docker network exposure (#2268)
shravanithouta108
authored
1c33d64

Commits on Aug 5, 2026

chore : revert unrelated frontend package-lock update
SaumyaT-21
committed
e43ab53

Commits on Aug 7, 2026