Changelog for
python3-mitmproxy-3.0.4-bp153.1.1.noarch.rpm :
* Wed Aug 01 2018 aloisioAATTgmx.com- Added protect_against_DNS_rebinding.patch and improve_DNS_rebinding_protection_support_IPv6.patch to address CVE-2018-14505 (fixes boo#1102178)- Added update_ldap3_dependency.patch for the package to work with python3-ldap3 2.5 (fixes boo#1101457)- Minor spec improvements
* Thu Apr 05 2018 aloisioAATTgmx.com- Update to version 3.0.4
* Fix an issue that caused mitmproxy to not retry HTTP requests on timeout.
* Various other fixes (AATTkira0204, AATTfenilgandhi, AATTtran-tien-dat, AATTsmonami, AATTluzpaz, AATTfristonio, AATTkajojify, AATTOliver-Fish, AATThcbarry, AATTjplochocki, AATTMikeShi42, AATTghillu, AATTemilstahl)
* Thu Feb 22 2018 aloisioAATTgmx.com- Update to version 3.0.3
* A minor release that actually includes the fix meant for 3.0.2. version 3.0.2
* Fix an issue that caused mitmproxy to lose keyboard control after spawning an external editor. version 3.0.1
* A quick point release to fix a bug that broke quoted arguments in the console command editor. version 3.0 Major Changes:
* Commands: A consistent, typed mechanism that allows addons to expose actions to users.
* Options: A typed settings store for use by mitmproxy and addons.
* Shift most of mitmproxy\'s own functionality into addons.
* Major improvements to mitmproxy console, including an almost complete rewrite of the user interface, integration of commands, key bindings, and multi-pane layouts.
* Major Improvements to mitmproxy’s web interface, mitmweb. (Matthew Shao, Google Summer of Code 2017)
* Major Improvements to mitmproxy’s content views and protocol layers (Ujjwal Verma, Google Summer of Code 2017)
* Faster JavaScript and CSS beautifiers. (Ujjwal Verma) Minor Changes:
* Vastly improved JavaScript test coverage (Matthew Shao)
* Options editor for mitmweb (Matthew Shao)
* Static web-based flow viewer (Matthew Shao)
* Request streaming for HTTP/1.x and HTTP/2 (Ujjwal Verma)
* Implement more robust content views using Kaitai Struct (Ujjwal Verma)
* Protobuf decoding now works without protoc being installed on the host system (Ujjwal Verma)
* PNG, GIF, and JPEG can now be parsed without Pillow, which simplifies mitmproxy installation and moves parsing from unsafe C to pure Python (Ujjwal Verma)
* Add parser for ICO files (Ujjwal Verma)
* Migrate WebSockets implementation to wsproto. This reduces code size and adds WebSocket compression support. (Ujjwal Verma)
* Add “split view” to split mitmproxy’s UI into two separate panes.
* Add key binding viewer and editor
* Add a command to spawn a preconfigured Chrome browser instance from mitmproxy
* Fully support mitmproxy under the Windows Subsystem for Linux (WSL), work around display errors
* Add XSS scanner addon (AATTddworken)
* Add ability to toggle interception (AATTmattweidner)
* Numerous documentation improvements (AATTpauloromeira, AATTrst0git, AATTrgerganov, AATTfulldecent, AATTzhigang1992, AATTF1ashhimself, AATTvinaydargar, AATTjonathanrfisher1, AATTBasThomas, AATTLuD1161, AATTayamamori, AATTTomTasche)
* Add filters for websocket flows (AATTs4chin)
* Make it possible to create a response to CONNECT requests in http_connect (AATTmengbiping)
* Redirect stdout in scripts to ctx.log.warn (AATTnikofil)
* Fix a crash when clearing the event log (AATTkrsoninikhil)
* Store the generated certificate for each flow (AATTdlenski)
* Add --keep-host-header to retain the host header in reverse proxy mode (AATTkrsoninikhil)
* Fix setting palette options (AATTJordanLoehr)
* Fix a crash with brotli encoding (AATTwhackashoe)
* Provide certificate installation instructions on mitm.it (AATTritiek)
* Fix a bug where we did not properly fall back to IPv4 when IPv6 is unavailable (AATTtiteuf87)
* Fix transparent mode on IPv6-enabled macOS systems (AATTGa-ryo)
* Fix handling of HTTP messages with multiple Content-Length headers (AATTsurajt97)
* Fix IPv6 authority form parsing in CONNECT requests (AATTr1b)
* Fix event log display in mitmweb (AATTsyahn)
* Remove private key from PKCS12 file in ~/.mitmproxy (AATTograff).
* Add LDAP as a proxy authentication backend (AATTcharlesdhdt)
* Use mypy to check the whole codebase (AATTiharsh234)
* Fix a crash when duplicating flows (AATTiharsh234)
* Fix testsuite when the path contains a “.” (AATTfelixonmars)
* Store proxy authentication with flows (AATTlymanZerga11)
* Match ~d and ~u filters against pretty_host (AATTdequis)
* Update WBXML content view (AATTdavidpshaw)
* Handle HEAD requests for mitm.it to support Chrome in transparent mode on iOS (AATTtomlabaude)
* Update dns spoofing example to use --keep-host-header (AATTkrsoninikhil)
* Call error handler on HTTPException (AATTtarnacious)
* Make it possible to remove TLS from upstream HTTP connections
* Update to pyOpenSSL 17.5, cryptography 2.1.4, and OpenSSL 1.1.0g
* Make it possible to retroactively increase log verbosity.
* Make logging from addons thread-safe
* Tolerate imports in user scripts that match hook names (`from mitmproxy import log`)
* Update mitmweb to React 16, which brings performance improvements
* Fix a bug where reverting duplicated flows crashes mitmproxy
* Fix a bug where successive requests are sent to the wrong host after a request has been redirected.
* Fix a bug that binds outgoing connections to the wrong interface
* Fix a bug where custom certificates are ignored in reverse proxy mode
* Fix import of flows that have been created with mitmproxy 0.17
* Fix formatting of (IPv6) IP addresses in a number of places
* Fix replay for HTTP/2 flows
* Decouple mitmproxy version and flow file format version
* Fix a bug where “mitmdump -nr” does not exit automatically
* Fix a crash when exporting flows to curl
* Fix formatting of sticky cookies
* Improve script reloading reliability by polling the filesystem instead of using watchdog
* Fix a crash when refreshing Set-Cookie headers
* Add connection indicator to mitmweb to alert users when the proxy server stops running
* Add support for certificates with cyrillic domains
* Simplify output of mitmproxy --version
* Add Request.make to simplify request creation in scripts
* Pathoc: Include a host header on CONNECT requests
* Remove HTML outline contentview (#2572)
* Remove Python and Locust export (#2465)
* Remove emojis from tox.ini because flake8 cannot parse that. :(- Dropped python-mitmproxy-no_git.patch (no longer necessary)
* Fri Apr 28 2017 aloisioAATTgmx.com- Update to version 2.0.2
* Fix mitmweb\'s Content-Security-Policy to work with Chrome 58+ (#2284)
* Wed Mar 15 2017 aloisioAATTgmx.com- Update to version 2.0.1
* http2: fix h2 header normalization test (#2080)
* Tue Feb 21 2017 aloisioAATTgmx.com- Update to version 2.0.0
* HTTP/2 is now enabled by default.
* Image ContentView: Parse images with Kaitai Struct (kaitai.io) instead of Pillow. This simplifies installation, reduces binary size, and allows parsing in pure Python.
* Web: Add missing flow filters.
* Add transparent proxy support for OpenBSD.
* Check the mitmproxy CA for expiration and warn the user to regenerate it if necessary.
* Testing: Tremendous improvements, enforced 100% coverage for large parts of the codebase, increased overall coverage.
* Enforce individual coverage: one source file -> one test file with 100% coverage.
* A myriad of other small improvements throughout the project.
* Numerous bugfixes.- Added python3-mitmproxy-no_git.patch
* Thu Feb 02 2017 aloisioAATTgmx.com- Update to version 1.0.2
* Fix compatibility with Python 3.5.0 1.0.1:
* Fix compatibility with Python 3.6
* Mon Dec 26 2016 aloisioAATTgmx.com- Switched to python3 package- Update to version 1.0
* All mitmproxy tools are now Python 3 only! We plan to support Python 3.5 and higher.
* Web-Based User Interface: Mitmproxy now offically has a web-based user interface called mitmweb. We consider it stable for all features currently exposed in the UI, but it still misses a lot of mitmproxy’s options.
* Windows Compatibility: With mitmweb, mitmproxy is now useable on Windows. We are also introducing an installer (kindly sponsored by BitRock) that simplifies setup.
* Configuration: The config file format is now a single YAML file. In most cases, converting to the new format should be trivial - please see the docs for more information.
* Console: Significant UI improvements - including sorting of flows by size, type and url, status bar improvements, much faster indentation for HTTP views, and more.
* HTTP/2: Significant improvements, but is temporarily disabled by default due to wide-spread protocol implementation errors on some large website
* WebSocket: The protocol implementation is now mature, and is enabled by default. Complete UI support is coming in the next release. Hooks for message interception and manipulation are available.
* A myriad of other small improvements throughout the project. version 0.18:
* Python 3 Compatibility for mitmproxy and pathod (Shadab Zafar, GSoC 2016)
* Major improvements to mitmweb (Clemens Brunner & Jason Hao, GSoC 2016)
* Internal Core Refactor: Separation of most features into isolated Addons
* Initial Support for WebSockets
* Improved HTTP/2 Support
* Reverse Proxy Mode now automatically adjusts host headers and TLS Server Name Indication
* Improved HAR export
* Improved export functionality for curl, python code, raw http etc.
* Flow URLs are now truncated in the console for better visibility
* New filters for TCP, HTTP and marked flows.
* Mitmproxy now handles comma-separated Cookie headers
* Merge mitmproxy and pathod documentation
* Mitmdump now sanitizes its console output to not include control characters
* Improved message body handling for HTTP messages: .raw_content provides the message body as seen on the wire .content provides the decompressed body (e.g. un-gzipped) .text provides the body decompressed and decoded body
* New HTTP Message getters/setters for cookies and form contents.
* Add ability to view only marked flows in mitmproxy
* Improved Script Reloader (Always use polling, watch for whole directory)
* Use tox for testing
* Unicode support for tnetstrings
* Add dumpfile converters for mitmproxy versions 0.11 and version 0.12
* Numerous bugfixes version 0.17:
* Simplify repository and release structure. mitmproxy now comes as a single package, including netlib and pathod.
* Rename the Python package from libmproxy to mitmproxy.
* New option to add server certs to client chain (CVE-2016-2402, John Kozyrakis)
* Enable HTTP/2 by default (Thomas Kriechbaumer)
* Improved HAR extractor (Shadab Zafar)
* Add icon for OSX and Windows binaries
* Add content view for query parameters (Will Coster)
* Initial work on Python 3 compatibility
* locust.io export (Zohar Lorberbaum)
* Fix XSS vulnerability in HTTP errors (Will Coster)
* Numerous bugfixes and minor improvements version 0.16:
* Completely revised HTTP2 implementation based on hyper-h2 (Thomas Kriechbaumer)
* Export flows as cURL command, Python code or raw HTTP (Shadab Zafar)
* Fixed compatibility with the Android Emulator (Will Coster)
* Script Reloader: Inline scripts are reloaded automatically if modified (Matthew Shao)
* Inline script hooks for TCP mode (Michael J. Bazzinotti)
* Add default ciphers to support iOS9 App Transport Security (Jorge Villacorta)
* Basic Authentication for mitmweb (Guillem Anguera)
* Exempt connections from interception based on TLS Server Name Indication (David Weinstein)
* Provide Python Wheels for faster installation
* Numerous bugfixes and minor improvements version 0.15:
* Support for loading and converting older dumpfile formats (0.13 and up)
* Content views for inline script (AATTchrisczub)
* Better handling of empty header values (Benjamin Lee/AATTbltb)
* Fix a gnarly memory leak in mitmdump
* A number of bugfixes and small improvements version 0.14:
* Statistics: 399 commits, 13 contributors, 79 closed issues, 37 closed PRs, 103 days
* Docs: Greatly updated docs now hosted on ReadTheDocs! http://docs.mitmproxy.org
* Docs: Fixed Typos, updated URLs etc. (Nick Badger, Ben Lerner, Choongwoo Han, onlywade, Jurriaan Bremer)
* mitmdump: Colorized TTY output
* mitmdump: Use mitmproxy\'s content views for human-readable output (Chris Czub)
* mitmproxy and mitmdump: Support for displaying UTF8 contents
* mitmproxy: add command line switch to disable mouse interaction (Timothy Elliott)
* mitmproxy: bug fixes (Choongwoo Han, sethp-jive, FreeArtMan)
* mitmweb: bug fixes (Colin Bendell)
* libmproxy: Add ability to fall back to TCP passthrough for non-HTTP connections.
* libmproxy: Avoid double-connect in case of TLS Server Name Indication. This yields a massive speedup for TLS handshakes.
* libmproxy: Prevent unneccessary upstream connections (macmantrl)
* Inline Scripts: New API for HTTP Headers: http://docs.mitmproxy.org/en/latest/dev/models.html#netlib.http.Headers
* Inline Scripts: Properly handle exceptions in `done` hook
* Inline Scripts: Allow relative imports, provide `__file__`
* Examples: Add probabilistic TLS passthrough as an inline script
* netlib: Refactored HTTP protocol handling code
* netlib: ALPN support
* netlib: fixed a bug in the optional certificate verification.
* netlib: Initial Python 3.5 support (this is the first prerequisite for 3.x support in mitmproxy)- Added python3-mitmproxy-rpmlintrc
* Wed Jan 27 2016 freitagAATTowncloud.com- Fix a repo in requires list
* Sun Jul 26 2015 freitagAATTowncloud.com- Update to upstream version 0.13
* Upstream certificate validation.
* Add HTTP transparent proxy mode.
* Add ~src and ~dst REGEX filters
* mitmproxy console: change g/G keyboard shortcuts to match less.
* mitmproxy console: Flow marking and unmarking.
* mitmproxy console: add marking of flows
* Remove the certforward feature
* Mon Mar 09 2015 freitagAATTowncloud.com- Fixed download URL to use the one from python.org- Fixed group- Year in the header
* Wed Mar 04 2015 freitagAATTowncloud.com- Fixed license.