send - npm Package Compare versions

Comparing version 0.17.0 to 0.17.1

HISTORY.md

@@ -0,1 +1,7 @@
+0.17.1 / 2019-05-10
+===================
+
+  * Set stricter CSP header in redirect & error responses
+  * deps: range-parser@~1.2.1
+
 0.17.0 / 2019-05-03
@@ -2,0 +8,0 @@ ===================

index.js

@@ -291,3 +291,3 @@ /*!
   res.setHeader('Content-Length', Buffer.byteLength(doc))
-  res.setHeader('Content-Security-Policy', "default-src 'self'")
+  res.setHeader('Content-Security-Policy', "default-src 'none'")
   res.setHeader('X-Content-Type-Options', 'nosniff')
@@ -497,3 +497,3 @@ res.end(doc)
   res.setHeader('Content-Length', Buffer.byteLength(doc))
-  res.setHeader('Content-Security-Policy', "default-src 'self'")
+  res.setHeader('Content-Security-Policy', "default-src 'none'")
   res.setHeader('X-Content-Type-Options', 'nosniff')
@@ -500,0 +500,0 @@ res.setHeader('Location', loc)

package.json

 {
   "name": "send",
   "description": "Better streaming static file server with Range and conditional-GET support",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "author": "TJ Holowaychuk <[e-mail]>",
@@ -30,3 +30,3 @@ "contributors": [
     "on-finished": "~2.3.0",
-    "range-parser": "~1.2.0",
+    "range-parser": "~1.2.1",
     "statuses": "~1.5.0"
@@ -33,0 +33,0 @@ },

No alert changes

Improved metrics

Total package byte prevSize

48173

increased by0.27%

Dependency changes

• Updatedrange-parser@~1.2.1