Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: csp false in rc5 removes custom csp header #322

Merged
merged 1 commit into from Dec 8, 2023

Conversation

vejja
Copy link
Collaborator

@vejja vejja commented Dec 8, 2023

Fixes #321

Types of changes

  • Bug fix (a non-breaking change which fixes an issue)
  • New feature (a non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Description

This PR reverts a breaking change introduced by rc.5
Previously to rc.5, setting a security header value to false did not modify the existing header value.
With rc.5, setting a security header value to false removed the header.

We are reverting to pre-rc.5 behaviour, i.e. we semantically translate false to do not set instead of do not send.

Checklist:

  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.
  • I have added tests to cover my changes (if not applicable, please state why)

Copy link

vercel bot commented Dec 8, 2023

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated (UTC)
nuxt-security ✅ Ready (Inspect) Visit Preview Dec 8, 2023 11:05am

@vejja vejja requested a review from Baroshem December 8, 2023 11:06
@vejja vejja self-assigned this Dec 8, 2023
@vejja vejja marked this pull request as ready for review December 8, 2023 11:07
@vejja vejja linked an issue Dec 8, 2023 that may be closed by this pull request
@vejja vejja mentioned this pull request Dec 8, 2023
6 tasks
@vejja vejja marked this pull request as draft December 8, 2023 12:22
@Baroshem
Copy link
Owner

Baroshem commented Dec 8, 2023

@vejja

Go on with merging. I understand the reasoning right now.

I will test everything out before publishing 1.0.0 on the 1.0.0 branch :)

@Baroshem Baroshem marked this pull request as ready for review December 8, 2023 14:26
@Baroshem Baroshem merged commit 662e47d into chore/1.0.0 Dec 8, 2023
3 checks passed
@vejja vejja mentioned this pull request Dec 8, 2023
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

fix: csp false in rc5 removes custom csp header
2 participants