Starstruk Logo MarkStarstruk

v0.12.1

ruixenui/ruixen.comv0.12.1Sep 14, 2022by glennzw

AI Summary

A minor release focused on security and stability, adding a new CSRF handler configuration and resolving various bugs in workflows and JavaScript.

Key Highlights

  • Added `trusted_origins` configuration for CSRF handler
  • Updated Continuous Integration and Release workflows
  • Fixed JavaScript minification and campaign copy bugs

New Features

  • Trusted Origins configuration
  • CI/CD workflow updates
  • JavaScript minification fixes
  • Campaign copy bug fix

Full Release Notes

## Gophish just got better.

We're excited to announce the release of Gophish v0.12.1. This is a minor release that includes a couple of bug fixes and one great new feature.

### Added Trusted Origins to CSRF Handler
We've added the ability to set `trusted_origins` in the `config.json` file. This allows you to add addresses that you expect incoming connections to come from, which is helpful in cases where TLS termination is handled by a load balancer upstream, rather than the application itself. This has been a long discussed and requested feature so it's great to have! Thanks to @mcab and everyone else in [this thread](https://github.com/gophish/gophish/pull/2301).

### Updated Workflows
Our Continuous Integration workflow has been updated and is succeeding again. We've also updated the Release workflow, mitigating some security concerns and adapting it be able to build Windows releases again. These are (hopefully!) at the bottom of this post.

### Minor fixes
Some JavaScript files hadn't been minified properly, causing problems with adding customer headers. A small bug was fixed where copying a campaign would not show [Deleted] in an edge case - see https://github.com/gophish/gophish/pull/2482. Thanks @29vivek.

### Changelog

You can find the full changelog for this release [here.](https://github.com/gophish/gophish/compare/v0.12.0...v0.12.1)

### How to Upgrade

To upgrade, download the release for your platform, extract into a folder, and copy (**remember to copy, not move so that you have a backup**) your existing gophish.db file into the new directory. Then, run the new Gophish binary and you'll be good to go!

Now, one more thing:

### We want to hear from you! 

Have questions, comments, or feature ideas about Gophish? Let us know by [filing an issue](https://github.com/gophish/gophish/issues/new).

### Enjoy


| SHA256 Hash | Filename |
|-----|-----|
|9ed2f88d6582b798a3448fb51080ff782b40cec8fb4855895720e9f782f68511|gophish-v0.12.1-linux-32bit.zip|
|44f598c1eeb72c3b08fa73d57049022d96cea2872283b87a73d21af78a2c6d47|gophish-v0.12.1-linux-64bit.zip|
|f80786dcb2c4037d7f9d6c9e8e8655c5eeaa8e46ef4032bda704b9ce18e23491|gophish-v0.12.1-osx-64bit.zip|
|e6936b8a472c730dcb0da64024d82341806869af666fad10f8639e7f85b1b7e6|gophish-v0.12.1-windows-64bit.zip|