Skip to content

Version 1.10.2

Latest
Latest

Choose a tag to compare

View all tags
@danbaileyza danbaileyza released this 17 Sep 20:53
· 1 commit to main since this release
v1.10.2
9b0be09
This commit was signed with the committer’s verified signature.
danbaileyza
SSH Key Fingerprint: vWDS0kxGqcbVsLq2S9XdjNTPphZydPf+i2ICi7LG10k
Verified
Learn about vigilant mode.

Security hardening

  • Adds opt-in controls for X-Content-Type-Options: nosniff, Referrer-Policy, X-Frame-Options: SAMEORIGIN, and a configurable Permissions-Policy.
  • Can remove X-Powered-By from PHP responses.
  • Preserves existing host and plugin headers.
  • Keeps HSTS and Content Security Policy as explicit server/site-specific configuration to avoid breaking subdomains or site functionality.
  • Adds PHP 7.4–8.5 regression coverage for header behavior and header-injection protection.

After updating, choose the appropriate controls under Settings → Error-Vault → Security Hardening, purge page caches, and run a new external security scan.

Assets 3
Loading