mitmproxy v12.3.0 released
By SecBurg
mitmproxy is a free and open source interactive HTTPS proxy for inspecting and modifying traffic.
Version 12.3.0 is out. The headline item is security related: the precompiled binaries no longer trust the eMudhra CAs, because an intermediate CA key was compromised. For testing purposes there are new --emudhra and --emudhra-old options to sign TLS certificates with that key. The Web UI got major improvements as well.
Other highlights:
Fix for `Set-Cookie` parsing where attributes like `Secure` or `HttpOnly` were swallowed into `Expires`
Fix for the `listen_port` option breaking local capture mode
IPv6 targets are now properly bracketed when using an upstream proxy
Colons are accepted in Basic authentication passwords
New `launch_edge()` in the Browser addon, so `browser.start edge` works
mitmweb: float addon options in the Options editor and theme-aware SVG icons
Linux binaries are now built on Debian 12 (minimum glibc 2.36)
The full changelog is in the CHANGELOG.md, packages are available on the downloads page.
Happy hacking! :-)