Stott Security 2.3.0.0
Version 2.3.0
This update has been published to api.nuget.optimizely.com and nuget.org.
This release introduces support for for 'nonce' and 'strict-dynamic' for the 'script-src', 'style-src' and their derivatives.
Features
- #172
- Merge CSP Sandbox tab into the CSP Settings tab.
- Update Audit tab to format dates in a more human readable format, e.g. 21st Jan 2024.
- Update question text on the modal for creating a CSP entry from an Allow List Violation.
- Update styles on the Header Preview tab.
- Update Service Extension method names to be more clear which module is being configured.
- #36
- Add support for Nonce values in the CSP.
- Add support for 'strict-dynamic' in the CSP.
- 'Nonce' and 'strict-dynamic' will be applied only to content pages and the header listing API.