@@ -62,11 +62,11 @@ NOTE: this version is a breaking change due to the removal of HPKP. Remove the H
62
62
63
63
## 5.0.2
64
64
65
- - Updates ` referrer-policy ` header to support multiple policy values
65
+ - Updates ` Referrer-Policy ` header to support multiple policy values
66
66
67
67
## 5.0.1
68
68
69
- - Updates ` expect-ct ` header to use a comma separator between directives, as specified in the most current spec.
69
+ - Updates ` Expect-CT ` header to use a comma separator between directives, as specified in the most current spec.
70
70
71
71
## 5.0.0
72
72
@@ -90,7 +90,7 @@ Fix support for the sandbox attribute of CSP. `true` and `[]` represent the maxi
90
90
91
91
## 3.7.0
92
92
93
- Adds support for the ` expect-ct ` header (@jacobbednarz : https://github.com/twitter/secureheaders/pull/322 )
93
+ Adds support for the ` Expect-CT ` header (@jacobbednarz : https://github.com/twitter/secureheaders/pull/322 )
94
94
95
95
## 3.6.7
96
96
@@ -335,7 +335,7 @@ console.log(1)
335
335
` ` `
336
336
337
337
```
338
- content-security-policy : ...
338
+ Content-Security-Policy : ...
339
339
script-src 'sha256-yktKiAsZWmc8WpOyhnmhQoDf9G2dAZvuBBC+V0LGQhg=' ... ;
340
340
style-src 'sha256-SLp6LO3rrKDJwsG9uJUxZapb4Wp2Zhj6Bu3l+d9rnAY=' 'sha256-HSGHqlRoKmHAGTAJ2Rq0piXX4CnEbOl1ArNd6ejp2TE=' ...;
341
341
```
@@ -552,15 +552,15 @@ Fixes an issue where view helpers (for nonces, hashes, etc) weren't available in
552
552
553
553
This release contains support for more csp level 2 features such as the new directives, the script hash integration, and more.
554
554
555
- It also sets a new header by default: ` x-permitted-cross-domain-policies `
555
+ It also sets a new header by default: ` X-Permitted-Cross-Domain-Policies `
556
556
557
557
Support for hpkp is not included in this release as the implementations are still very unstable.
558
558
559
559
:rocket :
560
560
561
- ## v.2.0.0.pre2 - 2014-12-06 01:55:42 UTC - Adds x-permitted-cross-domain-policies support by default
561
+ ## v.2.0.0.pre2 - 2014-12-06 01:55:42 UTC - Adds X-Permitted-Cross-Domain-Policies support by default
562
562
563
- The only change between this and the first pre release is that the x-permitted-cross-domain-policies support is included.
563
+ The only change between this and the first pre release is that the X-Permitted-Cross-Domain-Policies support is included.
564
564
565
565
## v1.4.0 - 2014-12-06 01:54:48 UTC - Deprecate features in preparation for 2.0
566
566
@@ -572,7 +572,7 @@ This release is intended to be ready for CSP level 2. Mainly, this means there i
572
572
573
573
## v1.3.4 - 2014-10-13 22:05:44 UTC -
574
574
575
- * Adds x-download-options support
575
+ * Adds X-Download-Options support
576
576
* Adds support for X-XSS-Protection reporting
577
577
* Defers loading of rails engine for faster boot times
578
578
@@ -598,4 +598,4 @@ It's often valuable to send extra information in the report uri that is not avai
598
598
Results in
599
599
```
600
600
report-uri csp_reports?enforce=true&app_name=twitter
601
- ```
601
+ ```
0 commit comments