Dev.to
5/11/2026
🚀 Permi v0.3.0 – Major Improvements to JS Scanning, AI Accuracy, and Speed
Short summary
Permi v0.3.0 adds JavaScript rendering via Playwright for scanning single-page apps and CSP-aware XSS detection to eliminate false positives, plus 50% faster concurrent scanning with smarter deduplication. Key fixes resolve export file writing, Windows async deadlock, and SQL injection detection with configurable timeouts. Available now via pip; experimental --js flag enables production-ready SPA testing.
- •Playwright-powered JavaScript rendering for React/Vue/Angular SPA scanning
- •AI filter now respects CSP headers to drastically reduce false positives
- •50% performance gain from concurrent SQL + XSS scanning with smart deduplication
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



