Unclaimed project
Are you a maintainer of NetEscapades.AspNetCore.SecurityHeaders? Claim this project to take control of your public changelog and roadmap.
Changelog
Small package to allow adding security headers to ASP.NET Core websites
Fixes:
WithHashTagHelper() using incorrect tag helper hashes for style-src, style-src-attr, and style-scr-elem CSP directives (#279)Breaking Changes:
WithHashTagHelper() on CustomDirectiveBuilder or DefaultSourceDirectiveBuilder - technically breaking, but really a bug (#279)Features:
Features:
OverInsecureHttp() and OverInsecureWs() scheme sources to CSP builders #273Features:
child-src t...Features:
child-src to Content-Security-Policy #259AddSecurityHeadersPolicies() for registering named polices #250Fixes:
Features:
AddRange() to SourceCollection #240, #242 (Thanks [@rankobp](https://github.com/ran...Features:
AddRange() to SourceCollection #240, #242 (Thanks @rankobp)X-Frame-Options ALLOW-FROM with correct method name AddFrameOptionsAllowFrom() #244This marks the first major release of the _NetEscapades.AspNetCore.Secur...
This marks the first major release of the NetEscapades.AspNetCore.SecurityHeaders. For simplicity, all the changes since 0.24.0 are included below.
Breaking Changes: