v5.1.0

Major Changes

• Initial Support for TLS 1.3

Full Changelog

• Reduce leaf certificate validity to one year due to upcoming browser changes (@mhils)
• Rename mitmweb's web_iface option to web_host for consistency (@oxr463)
• Sending a SIGTERM now exits mitmproxy without prompt, SIGINT still asks (@ThinkChaos)
• Don't force host header on outgoing requests (@mhils)
• Additional documentation and examples for WebSockets (@Kriechi)
• Gracefully handle hyphens in domain names (@matosconsulting)
• Fix header replacement count (@naivekun)
• Emit serverconnect event only after a connection has been established (@Prinzhorn)
• Fix ValueError in table mode of server replay flow (@ylmrx)
• HTTP/2: send all stream reset types to other connection (@rohfle)
• HTTP/2: fix WINDOW_UPDATE swallowed on closed streams (@Kriechi)
• Fix wrong behavior of --allow-hosts options (@BlownSnail)
• Additional and updated documentation for examples, WebSockets, Getting Started (@Kriechi)

You can find the latest release packages at https://mitmproxy.org/downloads/.

v5.0.1

• Fixed precompiled Linux binaries to not crash in table mode.

You can find the latest release packages on https://mitmproxy.org/downloads/.

v5.0.0

• New Table UI (@BkPHcgQL3V, @Jessonsotoventura)
• Add EKU extension to certificates. This fixes support for iOS 13 (@vin01)
• Security: Fixed command injection vulnerabilities when exporting flows as curl/httpie commands (@cript0nauta)
• Security: Do not echo unsanitized user input in HTTP error responses (@fimad)
• Many more bugfixes (see CHANGELOG).

You can find the latest release packages on https://mitmproxy.org/downloads/.

v4.0.4

• Security: Protect mitmweb against DNS rebinding. (CVE-2018-14505, @atx)
• Reduce certificate lifetime to two years to be conformant with
  the current CA/Browser Forum Baseline Requirements. (@muffl0n)
  (https://cabforum.org/2017/03/17/ballot-193-825-day-certificate-lifetimes/)
• Update cryptography to version 2.3.

You can find the latest release packages on https://mitmproxy.org/downloads/.

v4.0.3

• Add support for IPv6 transparent mode on Windows (#3174)
• Add Docker images for ARMv7 - Raspberry Pi (#3190)
• Major overhaul of our release workflow - you probably won't notice it, but for us it's a big thing!
• Fix the Python version detection on Python 3.5, we now show a more intuitive error message (#3188)
• Fix application shutdown on Windows (#3172)
• Fix IPv6 scope suffixes in block addon (#3164)
• Fix options update when added (#3157)
• Fix "Edit Flow" button in mitmweb (#3136)

You can find the latest release packages on our snapshot server.

v4.0.1

The previous release had a packaging issue, so we bumped it to v4.0.1 and re-released it.
This contains no actual bugfixes or new features.

Please see the v4.0.0 release notes!

v4.0.0

Features

• mitmproxy now requires Python 3.6!
• Moved the core to asyncio - which gives us a very significant performance boost!
• Reduce memory consumption by using SO_KEEPALIVE (#3076)
• Export request as httpie command (#3031)
• Configure mitmproxy console keybindings with the keys.yaml file. See docs for more.

Breaking Changes

• The --conf command-line flag is now --confdir, and specifies the mitmproxy configuration
  directory, instead of the options yaml file (which is at config.yaml under the configuration directory).
• allow_remote got replaced by block_global and block_private (#3100)
• No more custom events (#3093)
• The cadir option has been renamed to confdir
• We no longer magically capture print statements in addons and translate
  them to logs. Please use ctx.log.info explicitly.

Bugfixes

• Correctly block connections from remote clients with IPv4-mapped IPv6 client addresses (#3099)
• Expand ~ in paths during the cut command (#3078)
• Remove socket listen backlog constraint
• Improve handling of user script exceptions (#3050, #2837)
• Ignore signal errors on windows
• Fix traceback for commands with un-terminated escape characters (#2810)
• Fix request replay when proxy is bound to local interface (#2647)
• Fix traceback when running scripts on a flow twice (#2838)
• Fix traceback when killing intercepted flow (#2879)
• And lots of typos, docs improvements, revamped examples, and general fixes!

v3.0.4

• Fix an issue that caused mitmproxy to not retry HTTP requests on timeout.
• Various other fixes (@kira0204, @fenilgandhi, @tran-tien-dat, @smonami,
  @luzpaz, @fristonio, @kajojify, @Oliver-Fish, @hcbarry, @jplochocki, @MikeShi42,
  @ghillu, @emilstahl)

v3.0.3

A minor release that actually includes the fix meant for 3.0.2.

v3.0.2

Fix an issue that caused mitmproxy to lose keyboard control after spawning an external editor.