New
v6.6.0
- CSP: Removed deprecated header
block-all-mixed-contentand replaced it with a recommendation to use the already supportedupgrade-insecure-requestsinstead.
Unclaimed project
Are you a maintainer of secure_headers? Claim this project to take control of your public changelog and roadmap.
Changelog
Manages application of security headers with many safe defaults
Last updated 8 days ago
block-all-mixed-content and replaced it with a recommendation to use the already supported upgrade-insecure-requests instead.