Skip to content

Releases: github/secure_headers

Increase performance of SecureSecurityPolicyConfig

15 Aug 17:41
7a23cb6
Compare
Choose a tag to compare

What's Changed

  • Make SecureSecurityPolicyConfig significantly faster by @jhawthorn in #506
  • Note: If you are accessing values on SecureSecurityPolicyConfig as ivars, you will need to change this to hash access.

New Contributors

Full Changelog: v6.6.0...v6.7.0

v6.6.0

19 Jul 12:05
ff9797f
Compare
Choose a tag to compare

v6.5.0

24 Oct 19:09
0678a74
Compare
Choose a tag to compare
v6.5.0 (#501)

Release notes:

- CSP: Remove source expression deduplication. (@lgarron)
https://github.com/github/secure_headers/pull/499

v6.4.0

02 Aug 19:44
084f517
Compare
Choose a tag to compare
  • CSP: Add support for trusted-types, require-trusted-types-for directive (@JackMc): #486

https://github.com/github/secure_headers/blob/v6.4.0/CHANGELOG.md

v6.3.4

27 Jun 22:59
6b52428
Compare
Choose a tag to compare
  • CSP: Do not deduplicate alternate schema source expressions (@keithamus): #478

https://github.com/github/secure_headers/blob/v6.3.4/CHANGELOG.md

v6.3.3

05 May 21:35
e4a198c
Compare
Choose a tag to compare
  • Fix hash generation for indented helper methods (@rahearn)

For more details, see https://github.com/github/secure_headers/blob/v6.3.3/CHANGELOG.md

v6.3.2

05 May 21:36
5592e9a
Compare
Choose a tag to compare

Release notes:

  • Add support for style-src-attr, style-src-elem, script-src-attr, and script-src-elem directives (@ggalmazor)

For more details, see https://github.com/github/secure_headers/blob/v6.3.2/CHANGELOG.md

v6.3.1

05 May 21:37
f3d3f9d
Compare
Choose a tag to compare

Release notes:

  • Fixes deprecation warnings when running under ruby 2.7

For more details, see https://github.com/github/secure_headers/blob/v6.3.1/CHANGELOG.md

Fix rails 2 support

28 Nov 19:02
Compare
Choose a tag to compare

@solenko noticed an issue with the way the gem is loaded in rails 2 #304

Bug fix and strict dynamic support

11 Nov 17:04
Compare
Choose a tag to compare
  • Fix bug that can occur when useragent library version is older, resulting in a nil version sometimes.
  • Add constant for strict-dynamic