This release introduces support for HTTP Digest authentication, improves notifications and BApp restrictions, fixes several bugs, and updates Burp's browser.
HTTP Digest authentication support
We've reintroduced support for HTTP Digest authentication, making it easier to test applications that use this authentication method without relying on an older version of Burp or a workaround.
Improved notifications
Notifications now stay with Burp's main windows rather than appearing over dialogs. If a window closes, any notifications attached to it move to another window, so they remain visible and accessible.
Bug fixes
We've fixed the following issues:
- Documentation links in the Event Log now open correctly when clicked.
-
Hovering over large
__VIEWSTATEparameters in the Inspector no longer causes Burp to hang or crash on Linux. - The issue count on Dashboard scan tasks now updates correctly when you delete an issue.
- Burp now preserves your extension settings if you update before all your extensions have finished loading. Previously, some extensions could be missing after the restart and need reloading manually.
- HTTP messages containing server-sent event (SSE) responses are now sent to Organizer correctly. Items added afterwards are also numbered correctly.
- WebSocket Repeater tabs now retain their connection data when Burp repairs a corrupted project, so recovered tabs remain usable.
-
Fixed an issue where loading a project configuration using
--config-filecould silently discard the SOCKS proxy bypass list. This meant traffic intended to bypass the proxy could be routed through it instead. - You can now cancel requests in Repeater while their responses are streaming.
Browser upgrade
We've upgraded Burp's browser to Chromium 154.0.8037.98 for Windows & macOS, and 154.0.8037.97 for Linux. For more information, see the Chromium release notes.