Skip to content

Lib.AspNetCore.Security & Lib.AspNetCore.Mvc.Security 2.0.0

Choose a tag to compare

View all tags
@tpeczek tpeczek released this 06 May 06:57
v2.0.0
94ae336

Additions and Changes

  • Introduced Lib.AspNetCore.Security with SecurityHeadersMiddleware to centralize security headers support. Initial support includes HSTS, CSP and Expect-CT
  • Removed RequireHstsAttribute as HSTS support is now provided by SecurityHeadersMiddleware
  • Removed ContentSecurityPolicyAttribute as CSP support is now provided by SecurityHeadersMiddleware (CSP tag helper and html helper now depend on SecurityHeadersMiddleware)
  • Added ExpectCtReportingMiddleware, ExpectCtViolationReport and ISecurityHeadersReportingService for supporting Expect-CT violation reports
  • Added ContentSecurityPolicyHeaderValue, StrictTransportSecurityHeaderValue and ExpectCtHeaderValue for low level headers support
Assets 2
Loading