Releases: Firesphere/silverstripe-csp-headers
Releases · Firesphere/silverstripe-csp-headers
Improved script parsing through insertHeadTag
When using insertHeadTag
, the original method used with strip_tags
was too trigger-happy and could potentially strip out valid/wanted HTML from javascript, where it contained e.g. a variable with HTML to be rendered by the javascript (templates etc.)
The new solution is to take the contents of the <script></script>
tags instead.
[bugfix] in_cms wasn't set to a sane default
1.4.4 Add default value for in_cms
Disable in CMS
- Add option to disable the check in CMS.
Only call header when wanted
1.4.2 Remove duplicate add call
Harden datarecord check
1.4.1 Harden datarecord check
Add various other headers
- Added various other headers
- Improved and split out documentation
Minor updates
- Updated convertor
- Fixed up tests
Full release of convertor
- Add Connect as option to the CMS
Improved convertor
Improved the header to yml convertor.
Add connect-src from CMS
1.2.5 Add connect-src, add searchable for type