Timo Kössler

_Feature requested via email._ - [ ] Check whether this is safely possible.

- [ ] Allow reporting crashes without a GitHub account - [ ] Add in-app feedback

Api discovery: Detect string formats (WIP)

1

https://swagger.io/docs/specification/v3_0/data-models/data-types/#strings

Add ESM support (WIP)

1

Proof of concept, based on new hook system. Uses [import-in-the-middle](https://github.com/nodejs/import-in-the-middle). Usage with ESM: `node --import @aikidosec/firewall/esm app.js`

Do not rate limit by ip if user is set

1

- Also do not rate limit by user if ip is allowed. - Adds end2end test for rate limiting

Enhance cross-platform development support

1

- Use `npm run` instead of Makefile - Modify tests to work on Windows - Add Windows tests to GitHub Actions (only partially because containers are not supported) - Fixes...

Support http2 client (SSRF) (2)

1

This pr requires the new hook system because we need to modify a return value of a method. Commits cherry-picked from #360 - [ ] To solve: Request url not...

Improve xml sources

1

- Also add xml that is inside the request query, headers etc. to the context - Support multiple xml parser calls during one request