This version introduces a new feature to the rate limiter middleware by adding a whitelist option, along with several related changes to the codebase and documentation.

New Feature: Whitelist Option for Rate Limiter

• Rate Limiter Configuration:

  • Added a whiteList property to the RateLimiter type, allowing specific IP addresses to bypass rate limiting. (docs/content/3.middleware/1.rate-limiter.md, src/types/middlewares.ts, src/defaultConfig.ts) [1] [2] [3]
  • Updated documentation to include details about the new whiteList property. (docs/content/3.middleware/1.rate-limiter.md)

• Security Configuration:

  • Fixed an issue where securityConfig was not correctly initialized in the basic authentication middleware. (src/runtime/server/middleware/basicAuth.ts)

• Nonce Handling:

  • Improved the handling of nonces in CSP headers by ensuring existing nonces are replaced instead of duplicated. (src/runtime/nitro/plugins/40-cspSsrNonce.ts) [1] [2]

What's Changed

• Bug reports in repo: Use new template forms by @vejja in https://github.com/Baroshem/security/pull/578
• bug reports: update placeholders by @vejja in https://github.com/Baroshem/security/pull/579
• Update bug-report.yml by @vejja in https://github.com/Baroshem/security/pull/581
• docs(fix): readme license link by @IO-Fire in https://github.com/Baroshem/security/pull/591
• [ci skip] docs: update license year by @IO-Fire in https://github.com/Baroshem/security/pull/592
• Enhance header filtering in getHeadersApplicableToAllResources function to exclude falsy values by @ivanvakulov in https://github.com/Baroshem/security/pull/588
• Update GitHub question issue template with the correct link by @nicokempe in https://github.com/Baroshem/security/pull/600
• Fix/docs typo by @fahdarafat in https://github.com/Baroshem/security/pull/596
• fix(nonce): override user-defined nonce values with Nuxt Image by @GalacticHypernova in https://github.com/Baroshem/security/pull/593
• Add basic rate limiter whitelist (specific IPs only) by @zguig52 in https://github.com/Baroshem/security/pull/573
• Refactor basicAuth middleware to use runtime configuration correctly by @ivanvakulov in https://github.com/Baroshem/security/pull/599
• Chore/2.2.0 by @Baroshem in https://github.com/Baroshem/security/pull/607

New Contributors

• @IO-Fire made their first contribution in https://github.com/Baroshem/security/pull/591
• @ivanvakulov made their first contribution in https://github.com/Baroshem/security/pull/588
• @nicokempe made their first contribution in https://github.com/Baroshem/security/pull/600
• @fahdarafat made their first contribution in https://github.com/Baroshem/security/pull/596
• @zguig52 made their first contribution in https://github.com/Baroshem/security/pull/573

Full Changelog: https://github.com/Baroshem/security/compare/v2.1.5...v2.2.0