x-xss-protection - npm Package Versions

2.0.0 - 2016-04-29

Added

• Pass configuration to enable/disable default middlewares

Changed

• dnsPrefetchControl middleware is now enabled by default

Removed

• No more module aliases. There is now just one way to include each middleware
• frameguard can no longer be initialized with strings; you must use an object

Fixed

• Make hpkp lowercase in documentation
• Update hpkp spec URL in readmes
• Update frameguard header name in readme

1.3.0 - 2016-03-01

Added

• hpkp has a setIf option to conditionally set the header

1.2.0 - 2016-02-29

Added

• csp now has a browserSniff option to disable all user-agent sniffing

Changed

• frameguard can now be initialized with options
• Add npmignore file to speed up installs slightly

1.1.0 - 2016-01-12

Added

• Code of conduct
• dnsPrefetchControl middleware

Fixed

• csp readme had syntax errors

1.0.0 - 2015-12-18

Added

• csp module supports dynamically-generated values

Changed

• csp directives are now under the directives key
• hpkp's Report-Only header is now opt-in, not opt-out
• Tweak readmes of every sub-repo

Removed

• crossdomain middleware
• csp no longer throws errors when some directives aren't quoted ('self', for example)
• maxage option in the hpkp middleware
• safari5 option from csp module

Fixed

• Old Firefox Content-Security-Policy behavior for unsafe-inline and unsafe-eval
• Dynamic csp policies is no longer recursive