Lance

• fix bug in hasAuthenticationCharacteristic
• reduce amount of requests
  Thanks to @soffensive

Honey Bunny

• add XSSI protection Detection
• further code clean up
• fix POST/GET problem

Captain Koons

New Features:

• Can handle Basic Auth now
• Further reduction of false positives by checking for more things before starting to scan
• Further reduction by handling 304.

This release has various BugFixes:

• race condition leading to sometimes odd results
• consolidation of issues works now

This release got contributions from two other developers - @1lastBr3ath and @wh1tenoise. Special thanks to @wh1tenoise who gave the code a major clean up.

Marsellus Wallace

• If necessary, the extension will now issue two requests to reduce false positives.
• Also, depending on how the issue was discovered, it might be rated as Information and not as Medium.

Mia Wallace

I decided to improve the usability by not requiring the user to request both the non-authenticated version and the authenticated version of the script. Instead, when calling a passive scan of the authenticated version of the script, the extension requests the non-authenticated version by itself. This has proven to be more comfortable. It should be noted that the extension is still a passive scanner module, despite the fact that it issues a request per scanned file.