2.1.0

What's Changed

• Add filter rest_allowed_cors_origin by @jerico in #25

New Contributors

• @jerico made their first contribution in #25

Full Changelog: 2.0.2...2.1.0

2.0.2

What's Changed

• Fix string replacement for sub resource integrity attribute by @roborourke in #23

New Contributors

• @roborourke made their first contribution in #23

Full Changelog: 2.0.1...2.0.2

1.2.1

What's Changed

• [Backport v1.2-branch] Correct header name for HSTS by @hm-backport in #21

New Contributors

• @hm-backport made their first contribution in #21

Full Changelog: 1.2.0...1.2.1

2.0.1

What's Changed

• Correct header name for HSTS by @rmccue in #20

Full Changelog: 2.0.0...2.0.1

2.0.0

What's Changed

• Enable HSTS by default by @rmccue in #18

Full Changelog: 1.2.0...2.0.0

1.2.0

What's Changed

• Add ability to set HSTS header by @rmccue in #17

Full Changelog: 1.1.1...1.2.0

1.1.1

• Don't send frame blocking header for embeds #15

1.1.0

This release adds support for the report-only CSP header added in #8

See the readme for documentation.

1.0.0

Initial release!