Workflow

Pywb

Latest version: v2.8.3

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 16

2.3.4

Not secure
~~~~~~~~~~~~~~~~~~~~~

* Improvements to auto-fetch to support page fetch (webrecroder/wombat5, 497)
- Support fetching page with ``X-Wombat-History-Page`` and title ``X-Wombat-History-Title`` headers present.
- Attempt to extract title and pass along with cdx to ``_add_history_page()`` callback in RewriterApp, to indicate a url is a page. (498)
- General auto-fetch fixes: queue messages if worker not yet inited (in proxy mode), only parse <link> stylesheet hrefs as sheets.

* Cookie Rewriting Fix: don't update cookie cache on service worker (``sw_`` modifier) responses (499)
* Rewriting: HTML Unescape Fix: Attempt to HTML-entity-decode urls and innline styles that contain ``&`` to get correct rewriting of encoded urls (500)

2.3.3

Not secure
~~~~~~~~~~~~~~~~~~~~~

* Proxy Mode: Ensure head insert added even if no ``<head>`` tag, insert after first tag that is not ``<html>`` or ``<head>`` (496)

2.3.2

Not secure
~~~~~~~~~~~~~~~~~~~~~

* Eval rewriting fix: don't rewrite ``$eval``, only ``eval`` identifier (493)

* Cookie rewriting improvements: (491)
- Enable domain cookie cache for live index and recording modes using fakeredis, previously only available in Webrecorder
- Don't add duplicate cookies to Set-Cookie or Cookie headers
- Don't include cached Set-Cookie headers to serviceworkers for non-200 responses.
- Add cookies for ``sw_/`` and ``wkrf_`` modifiers
- Testing: add initial testing for domain cookie rewriting

* Misc fixes: (490)
- Ensure SCRIPT_NAME never empty (490)
- Static Paths: load ``/index.html`` for paths ending in ``/``, ensure static_prefix always inited correctly
- Docker: switch to designated $VOLUME_DIR before initializing
- Rules: update rules for soundcloud

2.3.1

Not secure
~~~~~~~~~~~~~~~~~~~~~

* Fix regression in wombat, new window.parent override from (webrecorder/wombat2) was throwing exception if top-frame was cross-origin (webrecorder/wombat3)
* Update to latest wombat, v3.0.0

2.3.0

Not secure
~~~~~~~~~~~~~~~~~~~~~

* Wombat Improvements and modularization:
- Client-side rewriting and auto-fetch systems moved to https://github.com/webrecorder/wombat
- Module-based setup and full testing for wombat
- Continuous auto-fetch up to 20 requests (484)

* Replay / Fidelity Improvements (451):
- Introduced a new server-side rewriter, JSWorkerRewriter, that handles rewriting JS workers and service-workers
- Improvements to JSOP Rewriter to handle empty query (475)
- Improvements to postMessage rewriting, override `eval(` while preserving scope (475)
- Fixes to ``this`` proxy rewrite to include ``, this``

* Misc Changes:
- Versioning: switched back to semver to more easily keep track of versions (488)
- Improved handling of open http connections and file handles (463)
- Fixes for latest urllib3, not verifying SSL certs (467), (469)
- Better logging for invalid cdxlines and cookies (477), (478)
- Fix warning in yaml.load (472)
- Index invalid form-data as binary (471)

2.2.20190410

~~~~~~~~~~~~~~~~~~~~~~~~~~~~

* Improved rewriting of JSONP, support matching JSONP with ``//`` comments (fixes 459)

Page 5 of 16

Links

Releases

Has known vulnerabilities

Previous Next

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.