Release Notes - 1.1

  • 1.1.5-funcrel
    This release provides an internal technical change to ensure that the extension is compatible with CAST Imaging v3 for Linux/Docker. No other changes are included.
  • 1.1.4-funcrel
    Fixed rule (1060022) description. 📝 34949
  • 1.1.3-funcrel
    Fixes a false positive violation of the rule: 💎 1060114 - Always enable authorization checks at function level for functions called on by APIs. 📝 34435
    💎 1060114 False positive for the rule: Always enable authorization checks at function level for functions called on by APIs
    💎 1060110 deprecate : Avoid filtering sensitive data using front-end
    💎 1060108 deprecate : Avoid data fields binded to columns to return sensitive data via APIs
    💎 1060106 deprecate: Avoid using generic methods such as ‘ToJson’ or ‘ToString’ to save sensitive or PII data
    💎 1060104 deprecate : Always review APIs returning sensitive data fields
    💎 1060116 deprecate : Always avoid http redirects to unknown or untrusted URLs
  • 1.1.2-funcrel
    Support installation of extension under Linux OS Fix some path incompatibilities when installing extension under Linux.
  • 1.1.1-funcrel
    Spring Security scope added to the rule Always enable authorization checks at function level for functions called on by APIs 📝 31662
    Spring Security scope added to the rule Always enable authorization checks at function level for functions called on by APIs 📝 31554
    Spring Security scope added to the rule Always enable authorization checks at function level for functions called on by APIs 📝 30366
    💎 1060114 “Always enable authorization checks at function level for functions called on by APIs” - false positives removed and scope changed to add “Spring Security”.
  • 1.1.0-funcrel
    💎 1060116 NEW Always avoid http redirects to unknown or untrusted URLs
    💎 1060114 NEW Always enable authorization checks at function level for functions called on by APIs
    💎 1060112 NEW Review APIs not accessed by frontend functions
    💎 1060110 NEW Avoid filtering sensitive data using front-end
    💎 1060108 NEW Avoid data fields binded to columns to return sensitive data via APIs
    💎 1060106 NEW Avoid using generic methods such as ‘ToJson’ or ‘ToString’ to save sensitive or PII data
    💎 1060104 NEW Review APIs returning sensitive data fields