Charles Proxy: starejše različice za prenos

Bug fixes
- Session importing fixes; faults existed if keys were in an unexpected order across Charles-native and HAR import formats.

Minor new features
- Map Remote: new Preserve base path option stops a destination base path being applied twice when you map to a URL that has a base path (for example a backend mounted under a sub-path that emits absolute URLs already in that path-space). On by default; the checkbox is only enabled when the Map To location has a path.
Minor improvements
- Windows: every bundled binary is now codesigned to improve interaction with Windows Defender Application Control (WDAC) policies.
Bug fixes
- Several Map Remote fixes for tunnelled (HTTPS) requests: the destination path is now applied, the original location is reported, an HTTPS to HTTP mapping no longer attempts a TLS handshake with a plain HTTP server, and the requested port is restored from the SNI on a mapped CONNECT
- Fix for tool configurations that were lost when migrating settings from Charles 4 to Charles 5 (Windows & Linux)
- Fix a rare keep-alive liveness probe that could corrupt the remote stream
- Fix rare throttling bugs that could lead to incorrect throttling under some conditions
- Further HTTP/2 proxying correctness and robustness fixes: trailers forwarded (such as gRPC), connection flow-control accounting and frame-size validation, stream concurrency and lifecycle handling, and send-window stall detection
- HTTP/1.x improvements for chunked trailers
- Improve Repeat behaviour after failed connects
- SOCKS5 method negotiation and version handling now more accurate follows the specification
- Improve SSL handshake handling, certificate cache, and TLS extension parsing
- Log timestamps on stdout and now at millisecond precision
- HAR export no longer produces invalid output when containing unsupported encoded bodies

The 5.1.1b series has been released as 5.2 due to the scope of changes.
Major improvements
- Faster and more reliable connections to dual-stack hosts using Happy Eyeballs (RFC 8305) connection establishment
- Forward 1xx interim responses, including 103 Early Hints, recorded as linked transactions
- Many HTTP/2 proxying correctness and robustness improvements (see bug fixes)
Minor improvements
- New Unencrypted filter in the sequence view
- Improved sequence view filtering performance
- Improve expansion handling on the Structure view when using the filter
- New icons in the JSON and XML tree viewers
- Windows: JNA DLL is now codesigned
- Rewrite tool response status rewrite now works on HTTP2 responses
- Improved detection of text bodies for rewrite rules
- Rewrite the SSL certificate name when DNS Spoofing or the Rewrite tool changes the destination
- Recognise more TLS 1.3 draft minor versions and HTTP/3 draft version strings
- Propagate TCP half-close through tunnelled connections
- Flatlaf 3.7 for minor UI fixes & improvements on Linux and Windows
- New charles filter CLI subcommand for filtering requests and responses from saved Charles sessions
- --debug launch option to enable debug-level logging
- Allow saving the Error Log and streaming it to a file (right-click on Error Log)
Bug fixes
- HTTP2 fixes and improvements: fixes a hang when concurrent streams exhaust the connection window; improve handling of max concurrent streams; improve hung stream detection; fix protocol error when Charles forwards a reset after remote close; fix an issue where Charles created an extra DATA frame on some GET requests; protocol compliance improvements; early connection closed handling and reporting
- Block list tool no longer hangs the connection when it blocks HTTP2 requests
- Fix NullPointerException on Active Connections frame when under load
- Avoid displaying non-sensical TLS information for in-progress streams
- Fix CSS and feed validation
- Reduce flashing when switching between requests
- macOS: menu bar icon dims again when the menu bar is inactive

- Upgrade to JDK 25.0.3 to resolve deadlock on Windows due to virtual threads
- Add Proxying toggle to toolbar to toggle system proxy settings
- Windows .msi now shows a UI rather than installing silently
- Fix startup crash on Linux due to bad JDK build
- Fix "Install Charles Root Certificate in Java VMs" on macOS

- Fix high CPU usage on macOS (regression in Charles 5.0.2)
- Show remote address while waiting to make a connection (rather than only after a connection has been established)

- Preserve scroll position when viewing the contents of a request or response that's in progress
- Highlight rules can now be disabled
- Highlight rules colours improved in dark mode
- Minor UI improvements to macOS, Windows & Linux
- HAR import: fix HTTP/3 imports
- Build .msi files for Windows in addition to the .appx
- Fix version update check when SOCKS proxy is enabled
- Fix detection and handling of truncated responses from upstream
- Fix .chlz importer to ignore dot files (so the zip can be easily created or modified on macOS)

- SSL: fix non standards compliant SSL certificates generated when proxying a self-signed certificate with a long expiry
- Windows: fix issues installing SSL Root Certificates due to app sandboxing
- HAR import: fix imports from Chrome omitting status
- Fix bug which could cause a Charles settings file to become unreadable
- Show startup logging in the Error Log

- Modernised UI and look & feel with a focus on moden platform conventions and usability
- Various UI enhancements:
- Filtering in lists in dialogs
- Updated iconography
- Improved dark mode support
- Find within a single request / response
- Improved undo/redo support in dialogs
- Support for Apple Silicon and Windows on ARM
- New .chlz session format for better compatibility and integration with other tools and workflows
- Automatically regenerate expired SSL root certificates
- macOS: support iOS Simulator 17 & 18

- Fix hung connections consuming a lot of memory
- Fix XML External Entity parsing vulnerability in Import/Export Settings (CVE-2018-19244)

Backported proxying fixes from 5.0, including:
- HTTP 2 bug fix for hung streams when a stream is reset
- Don’t reuse a remote SSL connection if the hostname has changed even if the IP address remains the same (not yet released in 5.0)