CHANGELOG.md

0.81.0 (2025-02-26)

Features

• security updates (#247) (7a0487d)

0.80.0 (2025-02-26)

Features

• security updates (#246) (32f20fd)

0.79.0 (2025-02-25)

Features

• security updates 022525.3 (#245) (d2f137c)

0.78.0 (2025-02-18)

Features

• fix a 500 error caused by a bad redirect transform (#244) (89b0743)

0.77.0 (2025-02-13)

Features

• HA OIDC auth mechanisms (#242) (13e7b07)

0.76.1 (2025-01-21)

Bug Fixes

• Correct 30x Location header target transform error (#241) (0206009)

0.76.0 (2025-01-21)

Features

• Add 'Sec-Fetch-Mode navigate' header to HTTP requests when appropriate (#240) (cd824dd)

0.75.5 (2025-01-17)

Bug Fixes

• Correct sub-domain Service-routing issue (#239) (70427d9)

0.75.4 (2025-01-16)

Bug Fixes

• Correct sub-domain Service-routing issue (#238) (d2e0999)

0.75.3 (2025-01-15)

Bug Fixes

• POST via fetch to private API listening on HTTPS fails (#237) (7994d01)

0.75.2 (2025-01-10)

Bug Fixes

• Bogus access_token from Entra can cause PKCE redirect loop in ZBR (#236) (19f0a5c)

0.75.1 (2025-01-09)

Bug Fixes

• Drop of very large files into Mattermost causes exception (#235) (3978157)

0.75.0 (2024-12-19)

Features

• Make ZAC served from Controller's /zac binding work under browZer (#234) (0177bf6)

0.74.0 (2024-12-11)

Features

• Null ptr exception while mishandling service app-connect data results in 500 Response (#233) (0a4e3fc)

0.73.0 (2024-11-20)

Features

• CSP 'font-src' tweak (add 'data:') (#232) (4d8decd)

0.72.0 (2024-11-01)

Features

• id_token -> access_token refactor (#231) (9c99f5d)

0.71.0 (2024-10-21)

Features

• handle null targetServiceAppData (#230) (5f64112)

0.70.0 (2024-10-21)

Features

• handle null targetServiceAppData (#229) (5406ddf)

0.69.0 (2024-10-20)

Features

• introduce 'target host transformer' to gzip inflator (#228) (8833200)

0.68.0 (2024-10-08)

Features

• do not process 'null' as a WebSocket event listener (#227) (58062e4)

0.67.0 (2024-09-26)

Features

• don't evaporate Angular-specific attributes during HTML streaming (#226) (569251b)

0.66.0 (2024-09-24)

Features

• bump to @openziti/libcrypto-js 0.24.0 (#225) (beb7dba)

0.65.0 (2024-09-09)

Features

• HA network detection, and authentication (#224) (d32bd52)

0.64.0 (2024-08-29)

Features

• Use Cert chain when in HA networks (#222) (b4c941c)

0.63.0 (2024-08-27)

Features

• Do not attempt to wrap/stream the Body of a 204 Response (#221) (549bcf3)

0.62.0 (2024-08-26)

Features

• Cert chain parsing support (#220) (fe46469)

0.61.0 (2024-08-21)

Features

• HomeAssistant support: URL intercept tweak (#219) (75fbf20)

0.60.0 (2024-08-13)

Features

• @import URLs not being adjusted during Response streaming (#218) (cd5281a)

0.59.1 (2024-08-06)

Bug Fixes

• add controller to 'CSP connect-src' if present (#217) (6eb75e0)

0.59.0 (2024-08-02)

Features

• Render Error page if Controller certs are expired (#216) (53c4613)

0.58.0 (2024-07-12)

Features

• new throughput chart in browZer tools (#215) (8e45448)

0.57.0 (2024-07-09)

Features

• emit error page if wssER connections fail (#214) (099b869)

0.56.9 (2024-07-08)

Bug Fixes

• remove obsolete hotkey/modal (#213) (21ff77f)

0.56.8 (2024-07-02)

Bug Fixes

• properly handle WebSocket msgs sent with opcode 2 (binary) (#212) (29d7881)

0.56.7 (2024-06-28)

Bug Fixes

• send chunked WebSocket frames in a single write (prevent RSV2/3 errs) (#211) (f2ea508)

0.56.6 (2024-06-14)

Bug Fixes

• upgrade workbox-strategies from 6.5.3 to 6.6.0 (#210) (fc0c7e4)

0.56.5 (2024-06-14)

Bug Fixes

• upgrade workbox-expiration from 6.5.3 to 6.6.0 (#209) (585f1bc)

0.56.4 (2024-06-14)

Bug Fixes

• upgrade workbox-core from 6.5.3 to 6.6.0 (#208) (1733f79)

0.56.3 (2024-06-14)

Bug Fixes

• upgrade async-mutex from 0.3.2 to 0.5.0 (#207) (c74095e)

0.56.2 (2024-05-22)

Bug Fixes

• Properly handle cookie values that are b64 (end with '=') (#206) (ae1b144)

0.56.1 (2024-05-13)

Bug Fixes

• correct a cookie handling issue (Wazuh) (#205) (d57c760)

0.56.0 (2024-04-29)

Features

• adjust CI/runtime to use hash-bundle name for browZer CSS (#204) (d812303)

0.55.0 (2024-04-29)

Features

• New Settings Dlg (with 'Changelog' and 'Feedback' widgets) (#203) (934a985)

0.54.1 (2024-04-22)

Bug Fixes

• Service revocation detect/react enhancements (#202) (d7c6b8a)

0.54.0 (2024-04-19)

Features

• Origin Trial support (#201) (ed0de9b)

0.53.0 (2024-03-31)

Features

• Blueframe support (#200) (555f820)

0.52.6 (2024-03-21)

Bug Fixes

• avoid using null appdata (#199) (d3ec6bf)

0.52.5 (2024-03-18)

Bug Fixes

• Scada web app loses WebSocket connection (#198) (c855df1)

0.52.4 (2024-03-17)

Bug Fixes

• lb+bootstrapper port handling (#197) (2ffa428)

0.52.3 (2024-03-17)

Bug Fixes

• non-default lb+bootstrapper port handling (#196) (cb6819a)

0.52.2 (2024-03-15)

Bug Fixes

• non-default bootstrapper port handling (#195) (7133377)

0.52.1 (2024-03-06)

Bug Fixes

• match redirects with serviceConnectAppData.dst_ip (#194) (e95f074)

0.52.0 (2024-03-05)

Features

• improve intercept.v1 config protocol parsing (#193) (40cdfe5)

0.51.0 (2024-03-05)

Features

• add inflate-deflate support (#192) (693e8c1)

0.50.5 (2024-02-28)

Bug Fixes

• relative path redirect tweak (#191) (c7ffcae)

0.50.4 (2024-02-28)

Bug Fixes

• ECS tweak (#190) (f8d38b9)

0.50.3 (2024-02-22)

Bug Fixes

• ECS tweak (#189) (b5b041b)

0.50.2 (2024-02-21)

Bug Fixes

• ECS tweak (#188) (20bd932)

0.50.1 (2024-02-21)

0.50.0 (2024-02-10)

Features

• OIDC refactor (#187) (bde75ec)

0.49.1 (2024-02-05)

Bug Fixes

• introduce ZitiDummyWebSocketWrapper (#186) (a4b0b17)

0.49.0 (2024-02-05)

Features

• introduce ZitiDummyWebSocketWrapper (#185) (109c9ae)

0.48.1 (2024-01-31)

Bug Fixes

• do not cache JSON content (#184) (3dd7de8)

0.48.0 (2024-01-25)

Features

• agent pool (#183) (3b2ba95)

0.47.3 (2024-01-11)

Bug Fixes

• multi-MB writes fail under nestedTLS (#182) (90d16a5)

0.47.2 (2024-01-08)

Bug Fixes

• 'socket hang up' errors (again) (#181) (854d817)

0.47.1 (2024-01-05)

Bug Fixes

• typo (#180) (af48390)

0.47.0 (2024-01-05)

Features

• introduce 'eruda' url query parm (#179) (868b628)

0.46.0 (2023-12-19)

Features

• eruda (#178) (4dc7961)

0.45.1 (2023-12-18)

Bug Fixes

• img fetch/render broken due to CSP misalignment (#177) (eb3857a)

0.45.0 (2023-12-16)

Features

• add gzip, and Angular HTML-frag support (#176) (36e64c9)

0.44.3 (2023-12-13)

Bug Fixes

• add controller and bootstrapper to 'connect-src' CSP (#175) (46a1d9d)

0.44.2 (2023-12-12)

Bug Fixes

• inject Keycloak early (#174) (c6dfd61)

0.44.1 (2023-12-12)

Bug Fixes

• CSP for Keycloak (#173) (460d2fd)

0.44.0 (2023-12-11)

Features

• support Keycloak (#172) (1ecc155)

0.43.1 (2023-12-06)

Bug Fixes

• loadBalancer url calc (#171) (cd45a91)

0.43.0 (2023-12-06)

Features

• Support multiple wssER's in same network (#170) (376a624)

0.42.0 (2023-12-03)

Features

• TLS handshake timeout event (#169) (b5c9b3d)

0.41.1 (2023-11-24)

Bug Fixes

• handle port on bootstrapper URL (#168) (0c27c5d)

0.41.0 (2023-11-20)

Features

• Load Balancer support (#167) (f803889)

0.40.1 (2023-11-19)

Bug Fixes

• typos (#166) (4f439df)

0.40.0 (2023-11-14)

Features

• MSFT RDS/RDP (#165) (0f532e8)

0.39.2 (2023-11-03)

Bug Fixes

• ensure UA header is present (keep Observium happy) (#164) (4feb38d)

0.39.1 (2023-11-01)

Bug Fixes

• handle duplicate Set-Cookie headers from Icinga (#163) (c15d360)

0.39.0 (2023-10-30)

Features

• Dual-mode: JSPI or NO_JSPI (#162) (6680c27)

0.38.0 (2023-10-26)

Features

• monitorix support (#161) (494fe19)

0.37.0 (2023-10-23)

Features

• JSPI (#160) (fab5ca5)

0.36.4 (2023-09-18)

Bug Fixes

• add 'worker-src' CSP handling (#159) (8f03c39)

0.36.3 (2023-09-14)

Bug Fixes

• correct problem with intercepted WebSocket msg handling (#158) (4ccb761)

0.36.2 (2023-09-13)

Bug Fixes

• drop unnecessary/skewed 'origin' header (#157) (92a3797)

0.36.1 (2023-09-11)

Bug Fixes

• don't drop METHOD when building ClientRequest (#156) (d4fe87c)

0.36.0 (2023-08-31)

Features

• Rancher support (#155) (cf657d0)

0.35.2 (2023-08-21)

Bug Fixes

• adjust servicePath (#154) (dcf71c6)

0.35.1 (2023-08-08)

Bug Fixes

• remove utf-8-validate dep (#153) (62aa33f)

0.35.0 (2023-08-08)

Features

• ZITI_EVENT_NO_WSS_ROUTERS (#152) (27beebb)

0.34.0 (2023-08-02)

Features

• alert on channelConnectFailEvent (#151) (41cd843)

0.33.2 (2023-08-02)

Bug Fixes

• skip 'inject check' when not going over Ziti (#150) (4be9522)

0.33.1 (2023-08-02)

Bug Fixes

• async SET_COOKIE msging (#149) (63eb57e)

0.33.0 (2023-07-26)

Features

• bootstrapper config rename (#148) (2a6a3aa)

0.32.0 (2023-07-24)

Features

• cert expired alert (#147) (0c80bd7)

0.31.0 (2023-07-19)

Features

• emit troubleshooting alerts (#146) (03d45cd)

0.30.4 (2023-07-13)

Bug Fixes

• do a GET before a POST at startup (use listControllerVersion) (#145) (c155409)

0.30.3 (2023-07-09)

Bug Fixes

• correct CSP connect-src handling (#144) (bb21e8b)

0.30.2 (2023-06-21)

Bug Fixes

• eliminate typo in CSP re-generator (#143) (c94aff2)

0.30.1 (2023-06-12)

Bug Fixes

• handle spaces in Service name (#142) (2150141)

0.30.0 (2023-06-03)

Features

• xgressEvent (#141) (46ad444)

0.29.0 (2023-05-30)

Features

• SW bootstrap enhancement (#140) (a4320f1)

0.28.0 (2023-05-26)

Features

• support both 'ws' and 'wss' ER bindings (#139) (0a96cf7)

0.27.0 (2023-05-23)

Features

• advanced services support (#138) (076c032)

0.26.1 (2023-05-19)

Bug Fixes

• temp bypass of idpAuthHealthEvent (#137) (1812a4e)

0.26.0 (2023-05-17)

Features

• bump to core v0.21.1 (#136) (8e0cffc)

0.25.0 (2023-05-17)

Features

• new CSP parser/generator (#135) (e591980)

0.24.3 (2023-04-22)

0.24.2 (2023-04-22)

Bug Fixes

• disable _zbrReloadPending check (#134) (9d6b421)

0.24.1 (2023-04-05)

Bug Fixes

• use authQueryElement.typeId (#133) (b9a840e)

0.24.0 (2023-04-04)

Features

• listen for idpAuthHealthEvent (#132) (ecf659a)

0.23.0 (2023-03-30)

Features

• IdP OIDC work moved to ZBR (#131) (0544fc5)

0.22.0 (2023-01-23)

Features

• phase-1 https service support (#128) (1de0051)

0.21.1 (2022-11-29)

Bug Fixes

• handle array of 'Set-Cookie' headers (#124) (a95f6d0)

0.21.0 (2022-11-27)

Features

• use 'memoization' for some frequently-used expensive (core) funcs (#122) (5c433b3)

0.20.2 (2022-11-23)

Bug Fixes

• adjust event handling for large Blob responses (Jellyfin streaming) (#121) (6b849a9)

0.20.1 (2022-11-21)

Bug Fixes

• host the 'toast' locally, not in CDN (#120) (f1d3be9)

0.20.0 (2022-11-18)

Features

• ZBR CSS handling, logLevel bugfix (#119) (98bd2bb)

0.19.0 (2022-11-03)

Features

• hard refresh recovery (#116) (68da683)

0.18.5 (2022-10-31)

Bug Fixes

• bump to core 0.16.12 (#115) (8ad3983)

0.18.4 (2022-10-19)

Bug Fixes

• channel/ws close handling (#113) (4c657ac)

0.18.3 (2022-10-13)

Bug Fixes

• adjust ZBR regex (#111) (d783038)

0.18.2 (2022-10-07)

Bug Fixes

• adjust ZBR regex (#109) (e840359)

0.18.1 (2022-09-13)

Bug Fixes

• don't hang if some wsER's are offline (#103) (04e4791)

0.18.0 (2022-09-06)

Features

• client-side logLevel control (#102) (5ee0a72)

0.17.0 (2022-08-31)

Features

• hotKey modal support (#99) (bc0dcc4)

0.16.1 (2022-08-30)

Bug Fixes

• allow longer ZBR init time (#97) (a030b0b)

0.16.0 (2022-08-30)

Features

• add IdP host to CSP (#96) (c964acb)

0.15.3 (2022-08-30)

Bug Fixes

• correct IdP token refresh issue (#95) (6d6cb2a)

0.15.2 (2022-08-23)

Bug Fixes

• correct libsodium e2e encryption regression (#93) (59bbba8)

0.15.1 (2022-08-16)

Bug Fixes

• initiate proper ZBR bootstrapping by SW (#91) (98e9336)

0.15.0 (2022-08-11)

Features

• initiate proper ZBR bootstrapping by SW (#89) (1bcfd56)

0.14.2 (2022-08-05)

Bug Fixes

• correct unneeded unregister/reloads (#87) (7d1273d)

0.14.1 (2022-08-05)

Bug Fixes

• correct unregister/reload race (#86) (c55c204)

0.14.0 (2022-08-05)

Features

• add SW reload event mechanism (#85) (7b03ef0)

0.13.0 (2022-08-04)

Features

• add 'toast' mechanism (#84) (b3d420b)

0.12.0 (2022-08-03)

Features

• no limits on simultaneous requests (#83) (04480b3)

0.11.0 (2022-08-03)

Features

• enhance SW caching (#82) (1cba171)

0.10.7 (2022-08-02)

Bug Fixes

• correct MM channel 'Loading...' issue (#81) (108a33b)

0.10.6 (2022-07-25)

Bug Fixes

• correct missing Buffer reference (#76) (72488f9)

0.10.5 (2022-07-24)

Bug Fixes

• JWT expiration improvements (#75) (e6dc9e1)

0.10.4 (2022-07-21)

Bug Fixes

• Need for Speed: make EC keys the default (#74) (0523375)

0.10.3 (2022-07-20)

Bug Fixes

• getMatchConfigInterceptV1 false positives (#73) (81216b5)

0.10.2 (2022-07-19)

Bug Fixes

• Pause for session cert sync to ER (#72) (c6774b2)

0.10.1 (2022-07-19)

Bug Fixes

• OWASP JuiceShop fixes (#71) (e2bce78)

0.10.0 (2022-07-16)

Bug Fixes

• Optional WASM Load (#68) (819a87b)
• semver bump (#66) (e0946dd)
• semver bump (#67) (3001e78)

Features

• Improved CSP handling; Zitified ZAC enablement (#65) (c6a5d05)

0.6.3 (2022-06-21)

Bug Fixes

• use httpAgent.target.service (#60) (3d06b52)

0.6.2 (2022-06-01)

0.6.1 (2022-05-04)

0.6.0 (2022-05-02)

Features

• add IdP access_token handling (#36) (bff33c9)

0.5.0 (2022-04-20)

Features

• intercepts (#30) (b0d1d6d)

0.4.2 (2022-04-12)

0.4.1 (2022-04-12)

0.4.0 (2022-04-12)

Features

• phase5 (#25) (5639106)

0.3.0 (2022-04-06)

Features

• phase4 (#21) (1d0fd48)

0.2.0 (2022-04-04)

Features

• phase3 (#19) (df670b3)

0.1.15 (2022-03-31)

0.1.14 (2022-03-28)

0.1.13 (2022-03-28)

0.1.12 (2022-03-28)

0.1.11 (2022-03-28)

0.1.10 (2022-03-28)

0.1.9 (2022-03-27)

0.1.8 (2022-03-25)

0.1.7 (2022-03-25)

0.1.6 (2022-03-24)

0.1.5 (2022-03-04)

0.1.4 (2022-03-03)

0.1.3 (2022-03-02)

0.1.2 (2022-03-02)

0.1.1 (2022-03-02)