Remove X-Download-Options and X-XSS-Protection headers

• One must use CSP instead of using the X-XSS-Protection
• X-Download-Options header is not required, since it was for IE8 and no one uses IE8

Commits

• feat: share cspNonce global with templates 7941fe8
• refactor: remove X-Download-Options header support d691d4a
• refactor: remove "X-XSS-Protection" header based protection 9e5884d
• chore: update dependencies 5cc8039

v5.0.0...v6.0.0

Drop Node 12, bug fixes and small improvements

• chore: use the next tag for release 15acfa0
• refactor: extract CSRF exception to its own class 9835df1
• style: reformat source files 64fbf6d
• chore: remove npm-audit in favor of synk a2ec0b0
• chore: update dependencies 3c8c757
• fix: upgrade @poppinss/utils from 2.5.9 to 2.5.10 (#26) 0e67062
• chore(deps): bump highlight.js from 10.4.0 to 10.5.0 (#25) 5e629ef
• fix: upgrade helmet-csp from 3.2.0 to 3.3.1 (#24) 8497ba0
• refactor(xsrf-token): rename cookie name to all caps XSRF-TOKEN 789fd0d
• fix: upgrade ms from 2.1.2 to 2.1.3 (#21) a06d66e
• chore(deps): bump ini from 1.3.5 to 1.3.7 (#20) 937f668

v4.0.3...v5.0.0

update dependencies

• chore: update dependencies fa69c4e

v4.0.2...v4.0.3

Publish under alpha tag

• chore: update repo path 27ce3b1
• chore: publish with alpha tag 8fccb36
• chore: update dependencies 60a445c

v4.0.1...v4.0.2

update dependencies

• chore: update dependencies 0bbe477
• chore: update dependencies b1a3227

v4.0.0...v4.0.1

get package ready for beta version of core

• refactor: get package ready for beta version of core 3771e85

v3.0.8...v4.0.0

Fix for v3.0.7

• fix: remove unsupported csp config options 5fad231
• chore(deps): bump lodash from 4.17.15 to 4.17.20 (#17) fda7e47

v3.0.7...v3.0.8

ExceptRoutes property can now use function to enable/disable CSRF per route

• feat: add support for defining exceptRoutes as a function 7335657
• chore(package): update dependencies 5e850b8

v3.0.6...v3.0.7

Fix for v3.0.5

• fix: import Env module in config file d6a8d67

v3.0.5...v3.0.6

Updating underlying dependencies

• docs(README): add audit badge and update links 7a08808
• test: write tests for the provider a93a758
• refactor: disable csrf in testing mode 91b774d
• chore: update/format meta and source files a043bbe
• chore: update dependencies 4182810

v3.0.4...v3.0.5