Skip to content

Remove X-Download-Options and X-XSS-Protection headers
Compare
Choose a tag to compare
@thetutlage thetutlage released this 23 Mar 16:35
· 124 commits to develop since this release
v6.0.0
b4dbfc4
  • One must use CSP instead of using the X-XSS-Protection
  • X-Download-Options header is not required, since it was for IE8 and no one uses IE8

Commits

  • feat: share cspNonce global with templates 7941fe8
  • refactor: remove X-Download-Options header support d691d4a
  • refactor: remove "X-XSS-Protection" header based protection 9e5884d
  • chore: update dependencies 5cc8039

v5.0.0...v6.0.0

Assets 2