What's Changed
- test(injection): drive the cache-expiry case with a faked clock instead of a 1.1 s sleep (#24) by @y1o1 in #71
- fix(injection): refuse session cookie values outside the RFC 6265 cookie-octet grammar (#23) by @y1o1 in #70
- release: v0.4.0 by @y1o1 in #72
Full Changelog: v0.3.0...v0.4.0