4253 commits

Author	SHA1	Message	Date
Miroslav Štampar	04e1162d5a	Fix for --procs crash on DBMSes without stored procedures support	2026-11-12 14:29:08 +01:00
Miroslav Štampar	fec03cf662	Fix for --param-del being URL encoded in GET requests	2026-11-12 14:28:47 +01:00
Miroslav Štampar	da5c2c66c6	Fix for Set-Cookie merge overwriting other cookies (e.g. id vs x-id)	2026-11-12 14:28:46 +01:00
Miroslav Štampar	fe6f6c48c3	Fix for --ignore-proxy being unusable with environment proxy	2026-11-12 14:28:46 +01:00
Miroslav Štampar	dd6356c277	Fix for --load-cookies crash with session cookies (Python 3)	2026-11-12 14:28:46 +01:00
Miroslav Štampar	c129692040	Fix for --cookie-del (regression from d55d1633)	2026-11-12 14:23:22 +01:00
Miroslav Štampar	7b8e03ef3e	Fix for MSSQL row retrieval losing duplicates (OFFSET/FETCH for 2012+ and Azure)	2026-11-12 13:58:01 +01:00
Miroslav Štampar	e85b1bbd9d	Fix for leftover ASC/DESC when stripping ORDER BY in UNION technique	2026-11-12 12:57:40 +01:00
Miroslav Štampar	b6c4f880a5	Fix for multiple MIN()/MAX() fields in SQL queries (e.g. SELECT MAX(id),MIN(id))	2026-11-12 12:57:39 +01:00
Miroslav Štampar	167956b61c	Fix for LIMIT n OFFSET m being ignored in SQL queries (e.g. --sql-query)	2026-11-12 12:57:39 +01:00
Miroslav Štampar	3f7f87750a	Fix for tamper 'between' breaking function arguments (e.g. BENCHMARK)	2026-11-12 11:50:33 +01:00
Miroslav Štampar	eda9b00185	Fix for interrupted --first/--last corrupting stored value	2026-11-12 11:50:33 +01:00
Miroslav Štampar	6aa218f720	Fix for --dump-format=SQLITE with double quotes in names	2026-11-12 11:50:33 +01:00
Miroslav Štampar	77a31ee595	Fix for SQLite columns with special characters in name (e.g. 'my col')	2026-11-12 11:50:33 +01:00
Miroslav Štampar	c8422bf1f6	Fix for --hex with UNION JSON aggregation (SQLite, PgSQL, Oracle, MSSQL)	2026-11-12 11:50:33 +01:00
Miroslav Štampar	9fa2abb5dd	Fix for --sql-query dropping duplicate rows and query's ordering	2026-11-12 11:50:32 +01:00
Miroslav Štampar	d55d163352	Fix for -p matching inside other parameter names (e.g. id in x-id)	2026-11-12 11:50:32 +01:00
Miroslav Štampar	54c5a6582b	Fix for declined forcing of --dbms still restricting fingerprinting	2026-11-12 11:50:32 +01:00
Miroslav Štampar	a7a9d7a8fe	Fix for --eval dropping parameters after an empty one	2026-11-12 11:50:32 +01:00
Miroslav Štampar	f9e53443ed	Fix for anti-CSRF tokens containing '+' (and GET token not found with -p)	2026-11-12 11:50:32 +01:00
Miroslav Štampar	3c2384525c	Fix for --param-del being URL encoded in POST payload requests	2026-11-12 11:49:07 +01:00
Miroslav Štampar	161af41c9c	Fix for chained tamper hints (e.g. luanginx,space2comment)	2026-11-12 11:49:07 +01:00
Miroslav Štampar	eca9ff2e13	Fixes #6180	2026-11-10 15:10:16 +01:00
Miroslav Štampar	397a3bde2e	Implements #6177	2026-11-06 15:31:35 +01:00
Miroslav Štampar	097f4d2c37	Fixes #6176	2026-11-06 15:03:08 +01:00
Miroslav Štampar	202d8cc1c4	Adding some more entries into common files list	2026-11-06 09:15:14 +01:00
Miroslav Štampar	f65de0e890	Minor update	2026-11-04 10:20:01 +01:00
Miroslav Štampar	bf8b9956e0	Fixes #6170	2026-11-03 22:04:29 +01:00
Miroslav Štampar	8476cf4d09	Fix related to the #6171 (WebSocket Host port)	2026-11-03 22:04:01 +01:00
Miroslav Štampar	c15f4bf055	Fixes #6168	2026-11-02 11:13:40 +01:00
Miroslav Štampar	9cd0619e2b	Dummy update	2026-10-30 17:31:39 +01:00
Miroslav Štampar	6faa9bb929	Release 1.10.11 (#6165)	2026-10-30 17:30:50 +01:00
Miroslav Štampar	2ff5db17ba	Fixes #6165	2026-10-30 17:26:13 +01:00
Miroslav Štampar	c42ebd7acf	Fixes #6164	2026-10-29 14:24:18 +01:00
Miroslav Štampar	2d046c1a75	Fixes #6163	2026-10-29 14:15:37 +01:00
Miroslav Štampar	f8a42cf016	Fixes CI/CD errors	2026-10-27 13:47:04 +01:00
Miroslav Štampar	81d17b1ad2	Fixes #6162	2026-10-27 13:29:36 +01:00
Miroslav Štampar	083d9d0e6f	Fix for Ctrl-C hang on Python 3.14 (leaked cache locks)	2026-10-27 13:11:04 +01:00
Miroslav Štampar	a01582b83f	Minor update	2026-10-27 11:10:16 +01:00
Miroslav Štampar	94f8cf8136	Minor update	2026-10-27 09:34:04 +01:00
Miroslav Štampar	6a94f23251	Update related to the #6161	2026-10-27 09:23:47 +01:00
Miroslav Štampar	6df778743f	Update related to the #6161	2026-10-27 09:17:37 +01:00
Miroslav Štampar	6e06114947	Fixes #6157	2026-10-25 16:29:02 +01:00
Miroslav Štampar	c9745f883d	Minor update	2026-10-23 00:33:58 +02:00
Miroslav Štampar	11afdcb026	Fixes #6152	2026-10-21 13:51:35 +02:00
Miroslav Štampar	5b8a2faab1	Doing some cleaning for web search requests	2026-10-21 12:10:18 +02:00
Miroslav Štampar	da21091459	Update regarding the search engines naggings	2026-10-21 11:08:07 +02:00
Raju Ranjan	5e2a6aeec8	fix(search): parse current Bing result links (#6150) ... While looking into #6009 I noticed the Bing fallback in -g never returns anything, even when Bing itself serves a normal results page. Two things changed on Bing's side. The result anchor now carries target="_blank" before href, so '<h2><a href="..." h=' no longer matches at all. And the href is no longer the target URL but a tracking redirect (https://www.bing.com/ck/a?...&u=a1<base64url>), where the real link sits base64url-encoded after the "a1" prefix in the u parameter. The regex now allows extra attributes on both tags and captures either the u payload of a ck/a redirect or a plain href. The payload is decoded with decodeBase64(), which already deals with the URL-safe alphabet and the missing padding. Plain hrefs still work the same as before (with &amp; unescaped), in case Bing serves the old markup to some clients. Checked against a saved live results page (0 -> 10 links) and the old markup, and --smoke-test passes. Google still can't be scraped since it only serves a JS page now, so this doesn't fully close #6009, but Bing is usable again as a fallback when DuckDuckGo blocks the IP.	2026-10-21 10:41:33 +02:00
Miroslav Štampar	8461fd402b	Fixes #6151	2026-10-21 10:37:13 +02:00
Miroslav Štampar	9b0e262560	Fix related to the #6149	2026-10-20 10:07:33 +02:00