Skip to content

Lib.AspNetCore.Security & Lib.AspNetCore.Mvc.Security 2.1.0

Choose a tag to compare

View all tags
@tpeczek tpeczek released this 02 Jun 20:14
v2.1.0
b23c977

Bug Fixes

  • Adjusted nonce generation to specification

Additions and Changes

  • Added support for Referrer-Policy through SecurityHeadersMiddleware and ReferrerPolicyHeaderValue
  • Added support for X-Frame-Options through SecurityHeadersMiddleware, XFrameOptionsAttribute and XFrameOptionsHeaderValue
  • Added support for X-XSS-Protection through SecurityHeadersMiddleware, XXssProtectionAttribute and XXssProtectionHeaderValue
  • Added support for X-Content-Type-Options through SecurityHeadersMiddleware
  • Added support for X-Download-Options through SecurityHeadersMiddleware
  • Added support for block-all-mixed-content directive in Content Security Policy
  • Added support for upgrade-insecure-requests directive in Content Security Policy
  • Added support for require-sri-for directive in Content Security Policy
  • Added support for plugin-types directive in Content Security Policy
  • Added support for worker-src directive in Content Security Policy
  • Added support for frame-src directive in Content Security Policy
  • Added support for Content Security Policy reporting through ISecurityHeadersReportingService, ContentSecurityPolicyReportingMiddleware and ContentSecurityPolicyViolationReport
  • Added support for hashes caching in Content Security Policy tag helper
  • Added HttpResponseHeadersExtensions which provides methods for directly setting headers on response
Assets 2
Loading