diff --git a/HISTORY.md b/HISTORY.md
index 787c6be31..6ce7827a6 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,9 +1,11 @@
 unreleased
 ==========
 
-  * deps: finalhandler@1.1.1
+  * deps: finalhandler@1.1.2
+    - Set stricter `Content-Security-Policy` header
     - Fix 404 output for bad / missing pathnames
     - deps: encodeurl@~1.0.2
+    - deps: parseurl@~1.3.3
     - deps: statuses@~1.4.0
   * deps: parseurl@~1.3.3
 
diff --git a/package.json b/package.json
index 40fa14d38..bb128fba9 100644
--- a/package.json
+++ b/package.json
@@ -18,7 +18,7 @@
   "repository": "senchalabs/connect",
   "dependencies": {
     "debug": "2.6.9",
-    "finalhandler": "1.1.1",
+    "finalhandler": "1.1.2",
     "parseurl": "~1.3.3",
     "utils-merge": "1.0.1"
   },