Skip to content

NEWS.md

Latest commit

 

History

History
120 lines (73 loc) · 3.69 KB

NEWS.md

File metadata and controls

120 lines (73 loc) · 3.69 KB
Raw

serverHeaders 0.1.19

New features

  • Hex sticker logo, shown in the README. The source is man/figures/logo.svg.

serverHeaders 0.1.18

Bug fixes and minor improvements

  • ssl-redirection now passes only when the http request ends on an https page with a 2xx status. Before, any redirect chain containing a 2xx passed.
  • The redirection row and header_summary.redirection() are gone. They treated any 3xx or HTTP/2 response as an HTTPS redirect, and duplicated ssl-redirection.

serverHeaders 0.1.17

Bug fixes and minor improvements

  • The Subresource Integrity check now ignores inline and same-origin scripts, and needs integrity and crossorigin on every cross-origin script. One hashed script no longer passes the whole page.

serverHeaders 0.1.16

Bug fixes and minor improvements

  • Every header_summary() method now has offline tests, and live tests skip when offline or on CI.
  • R CMD check runs on GitHub Actions for pushes to main and pull requests.

serverHeaders 0.1.15

Bug fixes and minor improvements

  • README: correct x$status_codes, the links and the example output.
  • DESCRIPTION: fix the Description sentence and drop LazyData, as the package has no data.

serverHeaders 0.1.14

Bug fixes and minor improvements

  • referrer-policy lists such as no-referrer, strict-origin-when-cross-origin are judged on the last recognised value.
  • x-content-type-options and x-xss-protection are compared case-insensitively.
  • Only a leading http:// or https:// is stripped from the server, in any case.

serverHeaders 0.1.13

Bug fixes and minor improvements

  • The package is now MIT licensed.

serverHeaders 0.1.12

Bug fixes and minor improvements

  • New test: a site without HTTPS gets a WARN from the SSL check.

serverHeaders 0.1.11

Bug fixes and minor improvements

  • Now requires R >= 4.1.0, for the native pipe.
  • Code is formatted with air (air.toml) and passes lintr.

serverHeaders 0.1.10

Bug fixes and minor improvements

  • check() no longer errors on non-HTML responses such as JSON.

serverHeaders 0.1.9

Bug fixes and minor improvements

  • The SSL check reports the real connection error, not always "certificate has expired", and the ssl row keeps its value.

serverHeaders 0.1.8

Bug fixes and minor improvements

  • HSTS max-age is now compared in days, so values under a year get a WARN.

serverHeaders 0.1.7 2024-04-04

  • fix: Failed SSL redirects

serverHeaders 0.1.6 2024-02-12

  • fix: Handle non-ssl servers

serverHeaders 0.1.5 2023-09-30

  • feat: Make ssl checks a primary check with docs

serverHeaders 0.1.4 2023-09-29

  • feat: Explicit check for ssl redirection
  • feat: Better cli output for STS

serverHeaders 0.1.3 2023-08-06

  • feat: Detect missing charset in content-type
  • doc: Update README to install from r-universe

serverHeaders 0.1.2 2023-07-30

  • feat: Output of check() is now invisible
  • fix: Minor changes to message

serverHeaders 0.1.1 2023-06-13

  • feat: Use %>% instead of |> to avoid R 4.1 dep

serverHeaders 0.1.0 2023-05-23

  • refactor: Use header instead of security_header for column name
  • feat: Match https://securityheaders.com/ for highlighting headers
  • fix: Add message for successful STS header

serverHeaders 0.0.4 2023-05-18

serverHeaders 0.0.3 2023-05-10

  • feat: Return all status codes - not just the final code
  • tests: Add additional tests using different servers
  • feat: Nicer output cli output

serverHeaders 0.0.2 2023-03-19

  • fix: Change loop over headers, as some headers appear multiple times

serverHeaders 0.0.1 2023-02-19

  • feat: Initialise