1.6.0-beta.6

• Add support for @graphql-tools/executor (used by GraphQL Yoga server)

1.6.0-beta.5

• Detect whether next is installed using env variable

1.6.0-beta.4

• Improve type definitions for setUser(...)
• Add support for Fastify

1.6.0-beta.3

Merge pull request #424 from AikidoSec/patch-set-user

Log warning only once

1.6.0-beta.2

Merge pull request #417 from AikidoSec/patch-path

Avoid double wrapping path

1.6.0-beta.1

Merge pull request #324 from AikidoSec/new-hooks-system

Implement new hook system

1.6.0-beta.0

• Includes a new SQL injection detection that understands SQL queries with different dialects (See https://github.com/AikidoSec/zen-internals)

1.5.70

• Improve metadata and stack traces for SSRF attacks
• Improve route discovery
• Improve path traversal detection (for absolute paths)
• Improve file system functions coverage
• Improve NoSQL detection
• Introduce AIKIDO_DISABLE=1 to force disable firewall
• Improve cookie parsing performance
• Improve route matching

1.5.69

• Improvements for API discovery
• Improvements for route generation from URL
• Improvements for shell injection detection

1.5.68

• Improve accuracy using performance.now()
• Ignore iss claim for JWT tokens
• Check for path traversal in child_process.fork(...)
• Improvements for API discovery