Firewall for Artifactory Release Notes

Disabled repositories no longer appear in the IQ Server repositories view for both hosted and proxy repositories.

We have added the functionality for the quarantine message to include a customizable response.

Integrated Tomcat listener to improve the delivery of Firewall messaging through the HTTP reason phrase.

Improved performance when enabling or disabling a repository

Improved query performance when getting the repository summary information to avoid OOM

Added REST API endpoints to allow admin users to change the configuration, reload the plugin, and check the IQ Server connection

Fixed an issue with incorrect MODE selection

Fixed an issue when using cargo sparse indexes

Requires Sonatype IQ Server release 168.

Adding Fail Open Mode to enable users to ALLOW or DENY access to quarantined objects while IQ connection failures

Fixed an issue where new component audit/quarantine notifications were not sent

Added support for Policy Compliant Component Selection for npm

Added support for Namespace Confusion Protection

Improved logging during plugin initialization

Fixed an issue with the retrieval of the version number for JFrogArtifactory

Fixed an issue with a high availability cache strategy. The firewall.cache.quarantine.strategy configuration settings are deprecated and will now be ignored

Fixed issue with API incompatibility with JFrogArtifactory 7.38+

Added High-Availablity sections

Fixed issue with the 'Repository Manager' name in the 'Repositories' view in IQ Server.

Ability to re-quarantine a component

Fixed CSRF issue with IQ URL

Audit the entire repository when enabled

Improved how to access the IQ policy report URL

Improved IQ connection handling

More graceful handling if the firewall.properties configuration file goes missing

Fixed issue when using a web application path

Added support for proxies

Improved IQ summary report URL

Allow readers to access the Evaluation Summary

Initial release