secure_headers

Release notes

What's Changed

• Lowercase headers by @arashnd in https://github.com/github/secure_headers/pull/533
• Cleanup repository files and Gem build by @rzhade3 in https://github.com/github/secure_headers/pull/536

New Contributors

• @arashnd made their first contribution in https://github.com/github/secure_headers/pull/533

Full Changelog: https://github.com/github/s...

Release notes

What's Changed

• Update default X-XSS-Protection value to 0 by @rzhade3 in https://github.com/github/secure_headers/pull/479

New Contributors

• @boveus made their first contribution in https://github.com/github/secure_headers/pull/520
• @rzhade3 made their first contribution in https://github.com/github/secure_headers/pull/479
• @vcsjones made their first contribution...

What's Changed

• Make SecureSecurityPolicyConfig significantly faster by @jhawthorn in https://github.com/github/secure_headers/pull/506
• Note: If you are accessing values on SecureSecurityPolicyConfig as ivars, you will need to change this to hash access.

New Contributors

• @jhawthorn made their first contribution in https://github.com/github/secure_headers/pull/506

**Full Changel...

• CSP: Removed deprecated header block-all-mixed-content and replaced it with a recommendation to use the already supported upgrade-insecure-requests instead.

Release v6.5.0