1.66

These are the release notes of the latest version of humble and, as always, a recommendation that I hope will be to your liking: 'White Kid Sing The Blues In Guitar Shop Like It's Nobody's Business!'.

Thank you for downloading it, for trying it and for your time!

Fixes

c6b3f08 - Clean up of fingerprint file, l10n ES file and highlight one header
311d605 - Review and improvement of references in l10n files
e6cba08 - Review and improvement of references in l10n files
8164ff4 - Review and improvement of references in l10n files
9ab1b92 - Typos in header checks
493ab3c - Test output significantly improved and warnings fixed
cfb1cef - CSP fetch directives fall back to 'default-src' directive
1582986 - 'no-store' alone is compliant in 'Cache-Control'
0230fac - CSP 'unsafe-inline' is ineffective when a nonce or hash is present.
1fc7d0c - CSP host/scheme sources are ignored under 'strict-dynamic'
d02decc - Case and substring bugs in several header checks
706c2f6 - Case and substring bugs in more header checks, with regression test
01adfd0 - 'X-XSS-Protection: 0' is compliant and no longer reported
12d001f - Only the first 'max-age' directive counts
439a8ce - Docs
4378872 - Case-insensitive order of empty HTTP response headers
42977c2 - Headers in 'humble.skip' are no longer reported as missing
2830ea7 - Case-insensitive order of HTTP response headers
f087aa4 - CSP checks match whole values instead of substrings

Features

45c4737 - Docker: bind-mount the wheels instead of COPY + rm
0a011e6 - 1 new fingerprint header
8eb4447 - Improved 'Set-Cookie: Invalid Prefixes' check
1ea0b07 - 1 new insecure check
298c22c - 1 new insecure check

Minor

decd5ae - Code optimizations
7e06aff - OWASP Secure Headers project links have been updated.
f99a74e - Code optimizations related to CSP and HSTS
2b3fb9f - Code optimizations related to Access-Control-Allow-Origin
fff3622 - Improved 'Content-Security-Policy-Report-Only' message
93c9dfc - Code optimizations related to fingerprint headers
610f97c - Code optimizations related to enabled headers

Full changelog: 1.65...master