Minor Changes
-
#64
02ca36f
Thanks @nibtime! - feat: ✨ Hash-based CSP with trusted proxy loader to support Firefox and Safari (fixes #63)-
Avoids broken SRI validation of Firefox and Safari together with
strict-dynamic
-
an important precursor for alternative configuration methods to middleware, that can't dynamically opt-out from
strict-dynamic
by user agent
-
-
#64
02ca36f
Thanks @nibtime! - rebuild/refactor lib into many small modules with CSP manifest (fixes #40)-
writes out a single file to
.next/static/~csp/csp-manifest.json
with all information about trustable sources identified during SSR -
precursor for a multi-package approach to support alternative configuration methods (described in https://github.com/nibtime/next-safe-middleware/discussions/60#discussioncomment-3259782)
-
perf: fetch CSP manifest only once on first access and cache for all subsequent middlewares
-
-
#64
02ca36f
Thanks @nibtime! - feat(csp): newCspBuilder
class with fluent interface for safe and easy CSP construction + manipulation