Releases: nswdpc/silverstripe-csp
Releases · nswdpc/silverstripe-csp
v1.0.1
v1.0.0
v0.4.4
v0.4.3
v0.4.3-rc1
v0.4.2
v0.4.1
v0.4.0
v0.3.1
What's Changed
- Improve notes related to directives and value by @JamesDPC in #7 (see also #6)
- Update & improve nonce handling by @JamesDPC in #8
- Update dev requirements by @JamesDPC in #9
Nonce handling
- The current nonce value is now created and retrieved via
Nonce::getNonce()
Full Changelog: v0.3.0...v0.3.1
v0.3.0
Changes
This update moves nonce application into a requirements backend by default, avoiding the need to process the HTTPResponse body via DOMDocument.
- Refactor and improve nonce creation and application
- The default method of applying nonces is via an injected requirements backend
- The middleware option is still available (see Policy.nonce_injection_method = 'middleware' )
- Default nonce length is reduced to the minimum 16 chrs
- Add tests to suit
- Update documentation to suit