CHANGELOG.md

dev

5.x

• 5.5.0 (2019-07-24)

  • Support X-Power-By header

• 5.4.0 (2019-06-07)

  • Support disable HSTS preload
  • Add display-capture and document-domain to Feature-Policy
  • Add src allowlist to Feature-Policy

• 5.3.3 (2019-02-28)

  • Support Laravel 5.8
  • Let Travis CI cover all supported PHP and Laravel versions

• 5.3.2 (2018-10-26)

  • Support Feature-Policy sync-xhr directive

• 5.3.1 (2018-09-06)

  • Support Laravel 5.7

• 5.3.0 (2018-08-04)

  • Support Feature-Policy header

• 5.2.1 (2018-07-31)

  • Update document

• 5.2.0 (2018-06-09)

  • Support Clear-Site-Header header
  • Support Server header

• 5.1.0 (2018-05-07)

  • Support Expect-CT header

• 5.0.0 (2018-04-09)

  • Support Content Security Policy Level 3.
  • Change HPKP hashes field scheme.
  • Change CSP directive hashes field scheme.
  • Rename CSP directive type field to schemes.
  • Remove CSP https-transform-on-https-connections directive.
  • Remove CSP image-src directive data field.
  • Do not use another packages for build csp and hpkp header.

4.x

• 4.2.0 (2018-03-11)

  • Support generating nonce value for CSP header (#13)
  • Fix HSTS "preload" markup (#16)

• 4.1.0 (2017-09-01)

  • Support Laravel 5.5 (1f76e6a)

• 4.0.0 (2017-08-04)

  • Transform paragonie/csp-builder dependency to bepsvpt/csp-builder (4ce4f14)
  • Transform paragonie/hpkp-builder dependency to bepsvpt/hpkp-builder (4b69514) (da7091e)

3.x

• 3.1.0 (2017-07-18)

  • Support Lumen framework (ddc61b1)

• 3.0.7 (2017-05-16)

  • Change referrer-policy header default value (8367d29)

• 3.0.6 (2017-04-20)

  • Use set method instead of excluding class when adds headers (#7) (#8) (1455748)

• 3.0.5 (2017-04-09)

  • Fix call to undefined method when download file (#5) (5b7ccd3)

• 3.0.4 (2017-02-21)

  • Fix Laravel 5.1 compatibility (#3)

• 3.0.3 (2017-01-29)

  • Support Laravel 5.4 (a98840e)

• 3.0.2 (2017-01-23)

  • Support disable specific header (9d995f7)

• 3.0.1 (2017-01-19)

  • Remove incorrect dependents (64e0f93)

• 3.0.0 (2016-12-19)

  • Support non Laravel project
    • Remove env helper function from config file (d4379b0)
  • Change namespace
  • Change project name

2.x

• 2.2.0 (2016-10-03)

  • Add X-Download-Options, X-Permitted-Cross-Domain-Policies, Referrer-Policy headers

• 2.1.1 (2016-08-24)

  • Prevent testing pollute helper functions

• 2.1.0 (2016-08-24)

  • Revert config file from json format to php

• 2.0.0 (2016-08-18)

  • Transform config file to json format
  • Remove force https config
  • Increase minimum php version to 7.0

1.x

• 1.1.2 (2016-01-02)
  • Code refactoring
  • Debug mode will add csp header now