Hans Ott

Use @ts-ignore instead of @ts-expect-error

1

```ts /** TS_EXPECT_TYPES_ERROR_OPTIONAL_DEPENDENCY **/ import type { Express, Router } from "express"; ``` We replace `TS_EXPECT_TYPES_ERROR_OPTIONAL_DEPENDENCY` with `@ts-expect-error` in our build script. We expect an error if e.g. express is...

Reduce compressed stats per operation from 100 -> 20

1

We keep durations of invocations to measure how long our algo takes to detect attacks. So per `fs.readFile` or `mysql.query`... When 5000 samples are reached, we compress the durations into...

Don't send heartbeat when there are compressed stats

1

We keep durations per operation (to measure the time our algo takes to detect attacks) After 5000 samples we compress them into percentiles. 5000 invocations is not much. This means...

Remove compressedTimings

1

It's a bit much per operation

Fix absolute path traversal bypass with backslash conversion

1

I also found out we didn't check \t \r \n for absolute paths (if it's an URL object)

Improve e2e tests

1

- Use waitOn for speed (if server boots faster than 2000ms) - Give entire error to t.fail(...) (more details) - Sample apps that didn't respect passed port

Exclude claims from JWT that are URLs

1

e.g. ```{ "http://example.com/some/path": "value" }```