Dana Epp

Consider using stronger ACL on Environment files

1

## Issue When an Environment file is created, it is typically stored in the environments directory. On 'nix/BSD environments, those files are stored with world-readable perms (644 to be exact)....

BRU CLI does not properly inject secrets from an Environment

5

## Issue When using an Environment which contains secrets, Bruno will successfully run requests directly, and through the Collection Runner just fine. However, running those same tests using the BRU...

## Issue When importing a Postman collection that includes collection-level variables, they are not imported as collection-level variables in Bruno. They actually get lost. ## Workaround For now, my only...

Bruno is altering response headers to lowercase when they shouldn't be

10

## Issue It appears that Bruno lowercases header names, even if the server is not sending it back that way. This could potentially break tests that are relying on testing...

# Issue Bruno currently stores its Secrets variables in `/Users/{username}/Library/Application Support/bruno/secrets.json` on macOS. By default, this file has permissions set with world READ and WRITE privileges. (666 perms).  Similar...

Need to account for redirects

1

It appears that some web frontends may redirect API discovery metadata URLs to the main login page without performing proper HTTP status redirects, which results in a false positive in...