v12.2.2Desktop
mitmproxy 12.2.2
Added 2
- Support adding and editing comments on individual flows in the mitmproxy console
- Allow hiding the Quick Help UI in the mitmproxy console with the 'H' key
Changed 6
- Reduce CERT_EXPIRY to 199 days
- Switch all content-encoding compression algorithms to use fastest settings by default, significantly improving addon runtime performance when assigning to message.content
- Reduce mitmweb FlowTable Redux subscriptions from O(rows) to O(1)
- Update optmanager value parsing exceptions to include the option name
- Show intercept filter tag at the bottom for default options in mitmweb
- Add number of selected flows in the mitmweb footer
Fixed 8
- Fix addon options not being included in --options output
- Fix view.settings.setval.toggle command to correctly use the provided key parameter instead of hardcoded "key" string
- Fix 400 Bad Request for HTTP requests with uppercase scheme
- Fix console command panel losing focus due to incoming traffic
- Fix failed CONNECT requests not being displayed in mitmdump
- Fix mitmweb editors not allowing content to be cleared to an empty string
- Fix mitmweb showing a blank page on Windows
- Fix modify_body crash when replacement strings contain backslash sequences
Removed 1
- Remove several dead functions
Security 1
- Fix LDAP injection vulnerability
From mitmproxy
- GHSA-527g-3w9m-29hv: Fix LDAP injection vulnerability reported by @yueyueL. (#8178, @mhils)
- Reduce
CERT_EXPIRYto 199 days. (#8142, @opstic) - Switch all content-encoding compression algorithms to use fastest settings by default.
This significantly improves addon runtime performance when assigning to
message.content. (#8055, @Prinzhorn) - Fix addon options not being included in
--optionsoutput. (#4423, @emanuele-em) - Fix
view.settings.setval.togglecommand to correctly use the provided key parameter instead of hardcoded "key" string. (#8167, @nameearly) - Fix 400 Bad Request for HTTP requests with uppercase scheme (e.g.
HTTP://). (#8174, @emanuele-em) - Fix console command panel losing focus due to incoming traffic (e.g. websocket messages). (#8173, @emanuele-em)
- mitmdump: Fix failed CONNECT requests not being displayed. (#7083, @Prinzhorn)
- mitmweb: Reduce FlowTable Redux subscriptions from O(rows) to O(1). (#8104, @ariel42)
- mitmweb: Fix editors not allowing content to be cleared to an empty string (#8149, @ariel42)
- Update optmanager value parsing exceptions to include the option name (#8016, @zdwg42)
- mitmweb: show intercept filter tag at the bottom for default options (#8026, @xBZZZZ)
- Fix a bug where mitmweb would show a blank page on Windows. (#8041, @Prinzhorn)
- mitmweb: Add number of selected flows in the footer (#8057, @skrattara)
- Fix
modify_bodycrash when replacement strings contain backslash sequences. (#8046, @HueCodes) - Added support for adding and editing comments on individual flows in the mitmproxy console. (#7944, @lups2000)
- Allow hiding the Quick Help UI in the mitmproxy console with the 'H' key. (#8095, @seroperson)
- Removed several dead functions using Skylos. (#8136, @duriantaco)