v6.3.0

What's Changed

• Added custom CSP string processing

New Contributors

• @rifler made their first contribution in #18

Full Changelog: v6.2.1...v6.3.0

v6.2.1

What's Changed

• Fixed typo in the allow-scripts constant

New Contributors

• @tandrup made their first contribution in #17

Full Changelog: v6.2.0...v6.2.1

v6.2.0

What's Changed

• Support false as a directive value for conditional directives (for example 'script-src': [isExample && 'example.com'])

New Contributors

• @DemonStore made their first contribution in #16

Full Changelog: v6.1.0...v6.2.0

v6.1.0

What's Changed

• Support reporting-endpoints headers by @pavkir in #11
• Add nonce to res.locals as well. Reported by @ManuelRauber #13

New Contributors

• @pavkir made their first contribution in #11

Full Changelog: v6.0.0...v6.1.0

v6.0.0

What's Changed

• Remove "'none'" value for merged directives with multiple declarations by @milo526 in #6

New Contributors

• @milo526 made their first contribution in #6

Full Changelog: v5.2.1...v6.0.0

v5.2.1

• Fixes
  • Some constants was not exported from express-csp-header

v5.0.0

Both of my CSP-related packages moved to this monorepo. This is their new home.
Also

• synced packages so now both of them has version 5
• refactored types (no breaking changes expected)
• increased minimal supported NodeJs version to current LTS 10

csp-header and express-csp-header

• added some new directives
  • navigate-to
  • report-to
  • require-sri-for
  • require-trusted-types-for
  • trusted-types

express-csp-header

• added support for Report-To header

Welcome to monorepo

Joined both of my csp-related libraries in a monorepo to make it easier to manage them.
Also

• synced packages so now both of them has version 5
• refactored types (no breaking changes expected)
• increased minimal supported NodeJs version to current LTS 10