|
| 1 | +22 February 2018: mitmproxy 3.0 |
| 2 | + |
| 3 | + ** Major Changes ** |
| 4 | + |
| 5 | + * Commands: A consistent, typed mechanism that allows addons to expose actions |
| 6 | + to users. |
| 7 | + |
| 8 | + * Options: A typed settings store for use by mitmproxy and addons. |
| 9 | + |
| 10 | + * Shift most of mitmproxy's own functionality into addons. |
| 11 | + |
| 12 | + * Major improvements to mitmproxy console, including an almost complete |
| 13 | + rewrite of the user interface, integration of commands, key bindings, and |
| 14 | + multi-pane layouts. |
| 15 | + |
| 16 | + * Major Improvements to mitmproxy’s web interface, mitmweb. (Matthew Shao, |
| 17 | + Google Summer of Code 2017) |
| 18 | + |
| 19 | + * Major Improvements to mitmproxy’s content views and protocol layers (Ujjwal |
| 20 | + Verma, Google Summer of Code 2017) |
| 21 | + |
| 22 | + * Faster JavaScript and CSS beautifiers. (Ujjwal Verma) |
| 23 | + |
| 24 | + |
| 25 | + ** Minor Changes ** |
| 26 | + |
| 27 | + * Vastly improved JavaScript test coverage (Matthew Shao) |
| 28 | + |
| 29 | + * Options editor for mitmweb (Matthew Shao) |
| 30 | + |
| 31 | + * Static web-based flow viewer (Matthew Shao) |
| 32 | + |
| 33 | + * Request streaming for HTTP/1.x and HTTP/2 (Ujjwal Verma) |
| 34 | + |
| 35 | + * Implement more robust content views using Kaitai Struct (Ujjwal Verma) |
| 36 | + |
| 37 | + * Protobuf decoding now works without protoc being installed on the host |
| 38 | + system (Ujjwal Verma) |
| 39 | + |
| 40 | + * PNG, GIF, and JPEG can now be parsed without Pillow, which simplifies |
| 41 | + mitmproxy installation and moves parsing from unsafe C to pure Python (Ujjwal Verma) |
| 42 | + |
| 43 | + * Add parser for ICO files (Ujjwal Verma) |
| 44 | + |
| 45 | + * Migrate WebSockets implementation to wsproto. This reduces code size and |
| 46 | + adds WebSocket compression support. (Ujjwal Verma) |
| 47 | + |
| 48 | + * Add “split view” to split mitmproxy’s UI into two separate panes. |
| 49 | + |
| 50 | + * Add key binding viewer and editor |
| 51 | + |
| 52 | + * Add a command to spawn a preconfigured Chrome browser instance from |
| 53 | + mitmproxy |
| 54 | + |
| 55 | + * Fully support mitmproxy under the Windows Subsystem for Linux (WSL), work |
| 56 | + around display errors |
| 57 | + |
| 58 | + * Add XSS scanner addon (@ddworken) |
| 59 | + |
| 60 | + * Add ability to toggle interception (@mattweidner) |
| 61 | + |
| 62 | + * Numerous documentation improvements (@pauloromeira, @rst0git, @rgerganov, |
| 63 | + @fulldecent, @zhigang1992, @F1ashhimself, @vinaydargar, @jonathanrfisher1, |
| 64 | + @BasThomas, @LuD1161, @ayamamori, @TomTasche) |
| 65 | + |
| 66 | + * Add filters for websocket flows (@s4chin) |
| 67 | + |
| 68 | + * Make it possible to create a response to CONNECT requests in http_connect |
| 69 | + (@mengbiping) |
| 70 | + |
| 71 | + * Redirect stdout in scripts to ctx.log.warn (@nikofil) |
| 72 | + |
| 73 | + * Fix a crash when clearing the event log (@krsoninikhil) |
| 74 | + |
| 75 | + * Store the generated certificate for each flow (@dlenski) |
| 76 | + |
| 77 | + * Add --keep-host-header to retain the host header in reverse proxy mode |
| 78 | + (@krsoninikhil) |
| 79 | + |
| 80 | + * Fix setting palette options (@JordanLoehr) |
| 81 | + |
| 82 | + * Fix a crash with brotli encoding (@whackashoe) |
| 83 | + |
| 84 | + * Provide certificate installation instructions on mitm.it (@ritiek) |
| 85 | + |
| 86 | + * Fix a bug where we did not properly fall back to IPv4 when IPv6 is unavailable (@titeuf87) |
| 87 | + |
| 88 | + * Fix transparent mode on IPv6-enabled macOS systems (@Ga-ryo) |
| 89 | + |
| 90 | + * Fix handling of HTTP messages with multiple Content-Length headers (@surajt97) |
| 91 | + |
| 92 | + * Fix IPv6 authority form parsing in CONNECT requests (@r1b) |
| 93 | + |
| 94 | + * Fix event log display in mitmweb (@syahn) |
| 95 | + |
| 96 | + * Remove private key from PKCS12 file in ~/.mitmproxy (@ograff). |
| 97 | + |
| 98 | + * Add LDAP as a proxy authentication backend (@charlesdhdt) |
| 99 | + |
| 100 | + * Use mypy to check the whole codebase (@iharsh234) |
| 101 | + |
| 102 | + * Fix a crash when duplicating flows (@iharsh234) |
| 103 | + |
| 104 | + * Fix testsuite when the path contains a “.” (@felixonmars) |
| 105 | + |
| 106 | + * Store proxy authentication with flows (@lymanZerga11) |
| 107 | + |
| 108 | + * Match ~d and ~u filters against pretty_host (@dequis) |
| 109 | + |
| 110 | + * Update WBXML content view (@davidpshaw) |
| 111 | + |
| 112 | + * Handle HEAD requests for mitm.it to support Chrome in transparent mode on |
| 113 | + iOS (@tomlabaude) |
| 114 | + |
| 115 | + * Update dns spoofing example to use --keep-host-header (@krsoninikhil) |
| 116 | + |
| 117 | + * Call error handler on HTTPException (@tarnacious) |
| 118 | + |
| 119 | + * Make it possible to remove TLS from upstream HTTP connections |
| 120 | + |
| 121 | + * Update to pyOpenSSL 17.5, cryptography 2.1.4, and OpenSSL 1.1.0g |
| 122 | + |
| 123 | + * Make it possible to retroactively increase log verbosity. |
| 124 | + |
| 125 | + * Make logging from addons thread-safe |
| 126 | + |
| 127 | + * Tolerate imports in user scripts that match hook names (`from mitmproxy |
| 128 | + import log`) |
| 129 | + |
| 130 | + * Update mitmweb to React 16, which brings performance improvements |
| 131 | + |
| 132 | + * Fix a bug where reverting duplicated flows crashes mitmproxy |
| 133 | + |
| 134 | + * Fix a bug where successive requests are sent to the wrong host after a |
| 135 | + request has been redirected. |
| 136 | + |
| 137 | + * Fix a bug that binds outgoing connections to the wrong interface |
| 138 | + |
| 139 | + * Fix a bug where custom certificates are ignored in reverse proxy mode |
| 140 | + |
| 141 | + * Fix import of flows that have been created with mitmproxy 0.17 |
| 142 | + |
| 143 | + * Fix formatting of (IPv6) IP addresses in a number of places |
| 144 | + |
| 145 | + * Fix replay for HTTP/2 flows |
| 146 | + |
| 147 | + * Decouple mitmproxy version and flow file format version |
| 148 | + |
| 149 | + * Fix a bug where “mitmdump -nr” does not exit automatically |
| 150 | + |
| 151 | + * Fix a crash when exporting flows to curl |
| 152 | + |
| 153 | + * Fix formatting of sticky cookies |
| 154 | + |
| 155 | + * Improve script reloading reliability by polling the filesystem instead of using watchdog |
| 156 | + |
| 157 | + * Fix a crash when refreshing Set-Cookie headers |
| 158 | + |
| 159 | + * Add connection indicator to mitmweb to alert users when the proxy server stops running |
| 160 | + |
| 161 | + * Add support for certificates with cyrillic domains |
| 162 | + |
| 163 | + * Simplify output of mitmproxy --version |
| 164 | + |
| 165 | + * Add Request.make to simplify request creation in scripts |
| 166 | + |
| 167 | + * Pathoc: Include a host header on CONNECT requests |
| 168 | + |
| 169 | + * Remove HTML outline contentview (#2572) |
| 170 | + |
| 171 | + * Remove Python and Locust export (#2465) |
| 172 | + |
| 173 | + * Remove emojis from tox.ini because flake8 cannot parse that. :( |
| 174 | + |
| 175 | + |
| 176 | + |
1 | 177 | 28 April 2017: mitmproxy 2.0.2
|
2 | 178 |
|
3 | 179 | * Fix mitmweb's Content-Security-Policy to work with Chrome 58+
|
|
18 | 194 |
|
19 | 195 | * HTTP/2 is now enabled by default.
|
20 | 196 |
|
21 |
| - * Image ContentView: Parse images with Kaitai Struct (kaitai.io) instead of Pillow. |
| 197 | + * Image ContentView: Parse images with Kaitai Struct (kaitai.io) instead of Pillow. |
22 | 198 | This simplifies installation, reduces binary size, and allows parsing in pure Python.
|
23 | 199 |
|
24 | 200 | * Web: Add missing flow filters.
|
|
27 | 203 |
|
28 | 204 | * Check the mitmproxy CA for expiration and warn the user to regenerate it if necessary.
|
29 | 205 |
|
30 |
| - * Testing: Tremendous improvements, enforced 100% coverage for large parts of the |
| 206 | + * Testing: Tremendous improvements, enforced 100% coverage for large parts of the |
31 | 207 | codebase, increased overall coverage.
|
32 | 208 |
|
33 | 209 | * Enforce individual coverage: one source file -> one test file with 100% coverage.
|
|
42 | 218 | * All mitmproxy tools are now Python 3 only! We plan to support Python 3.5 and higher.
|
43 | 219 |
|
44 | 220 | * Web-Based User Interface: Mitmproxy now offically has a web-based user interface
|
45 |
| - called mitmweb. We consider it stable for all features currently exposed |
| 221 | + called mitmweb. We consider it stable for all features currently exposed |
46 | 222 | in the UI, but it still misses a lot of mitmproxy’s options.
|
47 |
| - |
48 |
| - * Windows Compatibility: With mitmweb, mitmproxy is now useable on Windows. |
49 |
| - We are also introducing an installer (kindly sponsored by BitRock) that |
| 223 | + |
| 224 | + * Windows Compatibility: With mitmweb, mitmproxy is now useable on Windows. |
| 225 | + We are also introducing an installer (kindly sponsored by BitRock) that |
50 | 226 | simplifies setup.
|
51 |
| - |
| 227 | + |
52 | 228 | * Configuration: The config file format is now a single YAML file. In most cases,
|
53 | 229 | converting to the new format should be trivial - please see the docs for
|
54 | 230 | more information.
|
|
61 | 237 | due to wide-spread protocol implementation errors on some large website
|
62 | 238 |
|
63 | 239 | * WebSocket: The protocol implementation is now mature, and is enabled by
|
64 |
| - default. Complete UI support is coming in the next release. Hooks for |
| 240 | + default. Complete UI support is coming in the next release. Hooks for |
65 | 241 | message interception and manipulation are available.
|
66 | 242 |
|
67 | 243 | * A myriad of other small improvements throughout the project.
|
|
0 commit comments