All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
Version 4.3.0 targets to support creating lists and viewing reports up to 10.000 domains.
- Password change functionality
- Reduced the amount of memory needed to view reports
- Improved interaction of uploading spreadsheets with domain
- Excel spreadsheets are now formatted > 5000 rows
- Improved a11y
- Some changes on the signup form and e-mail, sending a mail to whom signed up
- The results table in the report is now much higher
- Footer links have changed
- API 2.4.0 support
- 502 Public share code was not capped in a form and in the backend validation
- 409 Deleting lists also deletes associated reports
- 338 domain was missing in the example sharing url
- 486 password was not set when sharing a report with a password the first time
- 344 label fuction was not working
- 471 Timeline becomes ugly with a lot of reports
- Several other small issues
- 487 Spreadsheet uploads without tags crash
- 483 Tags don't overwrite on upload
- Fixed crash INTERNET-NL-DASHBOARD-69: loading translations of a non existing language, template did not exist. Falls back to a supported language if no language is supplied
- Update websecmap and other dependencies to fix vulnerabilities
- Add tags to spreadsheet exports
- 463 Shared reports without passwords are not loaded
- 466 Filtering on report removes entire table
- Editing of domain lists via spreadsheets (uploading and downloading spreadsheet files)
- Tag/label support in spreadsheet uploads and downloads
- Be able to automatically share the latest report of a list
- Signup form for easier onboarding
- Support for automatically sharing of sharing specific reports on the front page
- View changes compared to the previous report in a dedicated overview on the report page
- Major speedups in report viewing and domain list editing
- All unfinished scans are shown in scan monitor, not just the last 30
- Support for Django 4.2, with psql12
- Minimum python version is now 3.10
- Reports are now stored on disk instead of the database for compression reasons
- Reduced the size of reports by changing data types
- Fix several N+1 issues
- Downloads of domains are in the same order as in the list
- RPKI and Security.txt metrics
-
Small Changes
-
Added github action for building and testing, removing travis
-
Upgraded dependencies
-
Added tag normalization
-
Bugfixes
-
The credential check url of the internet.nl api instance can now be configured (#396)
-
Some labels have been corrected
-
Removed CSRF from public reports
-
Previous report now always selects the same report type
-
Home: New homepage with a public report list
-
Tour: Updated tour screenshots, added lightbox and translated it to Dutch
-
Domains: Tag / label support for domains in a list: allows filtering reports on (multiple) tags
-
Domains: A tool to automatically discover and add www subdomains to a domain list
-
Domains: Filtering on the domain list
-
Domains: Start a web and mail scan from the same list: no need to keep two separate lists
-
Reports: Report sharing: share a report under a public url, with optional password
-
Reports: Expert feature: allow report times to be shifted to include newer (rescanned) metrics
-
Reports: Doughnut charts with a percentage in the middle
-
Profile: A new profile page with notification settings and metric settings
-
Small changes
- The menu has been re-written to reduce code complexity
- Icons have been added everywhere
- The UI has been streamlined in many areas: less clutter, less lines
- The scan monitor looks nicer, with color inidication when scans are finished
- Username is now visible in the menu for admins / impersonating users
- Add SPDX licence info
- Extra fields now have a calculated category conclusion
- Option to use EU resolvers for prechecks (#250)
- Updated javascript + python dependencies
-
Bugfixes
- Speed up domain list and scan monitor queries
- Fix possible CSRF issue, using axios
- Add stricter QA for python, squashing a few potential bugs
- Textual issues
- Bulk uploads in excel with https:// or pages in an url now work
- Correct graph average when extra fields are disabled
- Lists that are not planned to scan now don't show a date far in the future
- Update TLS ciphers on the server
- Update CSP header
- E-mail sending domain is now in the excel export, non-sending domain has been removed
- Report page does not reload every 5 minutes anymore
Third Version - 2020 Nov 20
- Notification e-mails
- When a scan is finished, a mail is sent to your account (set up details under Account)
- A second scan on the same list will create a notification mail which includes a comprehensive change report
- Management of notification in Account settings, unsubscription via a direct link
- Statistics on how the dashboard is used (for project managers only)
-
Small changes
- Domain-list manager will show how many duplicates have been removed when adding domains
- Scan monitor now has progress bars
- Report selection is more user friendly
- Report timeline now shows what report is being viewed (report number is on the timeline)
- Reports allow to compare scores
- Overall translations have been improved
- Overall notifications now come with an additional toast notification
- Overall notification now contain date and time information
- Overall nicer UI, better response times
- Admin features such as changing account and adding users have been slightly improved
-
Bugfixes
- Scans got stuck in a loop under rare situations, both the rare situation and the loop have been fixed
- Scans can now finish if the API returns no data for certain domain ({'example.com': 'error'})
- Overall accordions will not alter the navigation state (Command+R or CTRL-F5 now works after clicking them)
- Overall hamburger menu works on mobile
- Overall header of website will be hidden when scrolling
- Report table headers now render correctly in Safari
- Reports will now not contain the X-XSS-Protection field
-
Architecture
- Separation of the UI and the Django code, UI is now in a separate repository
- Split complex components in various sub-components for easier understanding, logic and development
- Application of BootstrapVue components, scoped styling (mostly)
- Application of NPM builds, BootstrapVue
- Removal of jQuery, lodash and moment.js (moment is still used by charts.js)
- Application of tree shaking syntax for BootstrapVue
- Application of vue-18n translations blocks, translations can be maintained with Babeledit
- Support for Python < 3.8
##API 2.0 Version - 2020-05-20
- Works with API 2.0, which has more direct results, as well as technical details and translation keys which allows new features in the future
- Various bugfixes, mainly in the report table
Second Version - 2020-01-30
Version 2 solves over 40 issues on our GitHub tracker. The most noteworthy are addressed in this log:
- Comparison of individual metrics between the current report and a second report. An arrow indicates an improved or deteriorated metric.
- The report timeline is now able to show multiple reports.
- Printing support for reports, including a better header and page layout.
- Sorting of columns in the report table.
- Possibility to stop a running scan (see scan progress in the scan monitor).
- Indication of changes between domains in the report and domains in the list.
- Major speed improvements in navigation due to using a Vue Single Page Application.
- Major speed improvements in showing reports due to less data in the report, pre-calculations and rendering optimizations.
- Ability to start a scan after the previous one has ended (no 24 hour cooldown anymore).
- Easier, more robust and faster adding of domains.
- Revamped scanning process, which gives better insight into the state of the scan.
- Revamped report settings section.
- New colors and patterns in the report.
- Moved javascript management to NPM.
- Improved navigation in the admin interface.
- "Perform scans" in Domain List settings.
First Version - 2020-09-20
This first version was built before issues where logged in GitHub. The first version brought these major features:
- Ability to manage domains in lists and perform scans on those lists
- Ability to view running scans
- Ability to view reports with the results of the scan
- Ability to import domains using spreadsheets and a web interface
- Report with charts per metric-type and a table per individual metric
- Export findings to Excel
- Ability to filter what metrics are visible in the report
- Power tools for admins (quickly adding existing API accounts and impersonation)
- Ability to use second factor authentication