Block a user
Rate limiting detection too weak (10 requests)
HTML reporter doesn't escape <>& in finding output
XSS vector URL parameter injection breaks on regex metacharacters
No trap cleanup on mktemp — temp files leak on Ctrl+C