Skip to content

chore: pre-release v3.3.9#4576

Merged
fzipi merged 1 commit into
v3.3/devfrom
v3.3/dev-pre-releasev3.3.9
Mar 28, 2026
Merged

chore: pre-release v3.3.9#4576
fzipi merged 1 commit into
v3.3/devfrom
v3.3/dev-pre-releasev3.3.9

Conversation

@fzipi

@fzipi fzipi commented Mar 27, 2026

Copy link
Copy Markdown
Member

what

  • pre-release v3.3.9

Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
@fzipi
fzipi requested a review from airween March 27, 2026 13:26
@fzipi fzipi added the release:ignore Ignore for changelog release label Mar 27, 2026
@fzipi
fzipi merged commit d7454c7 into v3.3/dev Mar 28, 2026
6 checks passed
@fzipi
fzipi deleted the v3.3/dev-pre-releasev3.3.9 branch March 28, 2026 20:36
fzipi added a commit that referenced this pull request Mar 28, 2026
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
fzipi added a commit that referenced this pull request Mar 28, 2026
* chore: pre-release v3.3.9 (#4576)

Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>

* fix: backport whitespace padding bypass fixes for 932180, 933110, 933111

Add t:removeWhitespace transformation to rules 932180, 933110, and 933111
to prevent file upload detection bypass via whitespace in filenames.

Backport of #4546, #4547, #4549 from main. Rule 944140 (#4548) skipped
as it does not exist in v3.3.

---------

Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release:ignore Ignore for changelog release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants