v2.2.0

What's Changed

• Feat - Support custom JavaScript payload by @daxAKAhackerman in #72

Full Changelog: v2.1.0...v2.2.0

v2.1.0

What's Changed

• Feat - Better collector script management by @daxAKAhackerman in #71

Full Changelog: v2.0.1...v2.1.0

v2.0.1

What's Changed

• Chore - Update dependabot by @daxAKAhackerman in #70

Full Changelog: v2.0.0...v2.0.1

v2.0.0

Important

This release is a breaking change. To provide more stability and performance, the local SQLite database in the backend container is no longer supported, and was replaced by a PostgreSQL database container. Once you run make update, you will be prompted with a warning message informing you that the content of the database will be reset. The content of the SQLite database will be backed up to database-backup.db. You can either proceed with the update, or hit CTRL-C to cancel.

Please refer to the README for some help on migrating the data to the new database.

What's Changed

• Chore - Backend refactor by @daxAKAhackerman in #57

Full Changelog: v1.8.1...v2.0.0

v1.8.1

What's Changed

• Fix - its-too-dangerous version by @daxAKAhackerman in #32

Full Changelog: v1.8.0...v1.8.1

v1.8.0

Important

• This release removes the legacy code that migrated the hardcoded database passwords to the new auto-generated passwords. This means that you cannot upgrade to this version directly from v1.0.0. You will have to go through v1.1.0 first.

What's Changed

• Feat - Use NGINX instead of Apache by @daxAKAhackerman in #29

Full Changelog: v1.7.0...v1.8.0

v1.7.0

Important

• This release introduces a new way of generating some payloads (the ones that load an external JavaScript file). While this allows for smaller payloads, it is NOT compatible with the payloads generated in previous versions of XSS-Catcher. This means that if you update to this version, the payloads that you sent before updating won't work if they use an external JavaScript file. While retro-compatibility would have been possible, it would have meant even more legacy code, which I do not want to maintain anymore.

What's Changed

• Feat - Smaller payloads by @daxAKAhackerman in #28

Full Changelog: v1.6.1...v1.7.0

v1.6.1

• Fix password_hash size limit bug
• Bump versions

v1.6.0

• Support global and per-client webhooks (using Slack format)
• Support global mail alert recipient

v1.5.0

• Payload generator improvement
• Tags support