From 6403af406d1daf3d72e4eb802804612bf899b0bd Mon Sep 17 00:00:00 2001 From: Postmodern Date: Wed, 19 Jun 2024 21:01:31 -0700 Subject: [PATCH] Updated the ChangeLog for 0.1.5. --- ChangeLog.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/ChangeLog.md b/ChangeLog.md index ded57d2..0df2520 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -1,3 +1,12 @@ +### 0.1.5 / 2024-06-19 + +* Improve the accuracy of {Ronin::Vulns::OpenRedirect#vulnerable?} when + detecting open redirects in meta-refresh HTML tags. + * Match the test URL when it ends with `?...`, `&...`, or `&...`. + * Detect when the test URL has an additional string appended to it + (ex: `.html`). The appended string can easily be bypassed by adding a + `?`, `&`, or `#` character to the end of the test URL. + ### 0.1.4 / 2023-09-19 #### CLI