Skip to content

CHANGELOG.md

Latest commit

 

History

History
96 lines (56 loc) · 2.89 KB

CHANGELOG.md

File metadata and controls

96 lines (56 loc) · 2.89 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

  • Placeholder for upcoming changes.

[2.0.0] - 2025-12-13

Breaking Changes

  • The Secure API now requires Python 3.10+ and uses the new builder-style header modules with full typing; this release replaces the previous legacy surface and removes the older cookie-centric helpers.

Added

  • Comprehensive validation pipeline helpers (allowlist_headers, deduplicate_headers, validate_and_normalize_headers) and typed presets for Secure.
  • New header builder coverage for modern headers (CSP, Permissions Policy, COEP, etc.) with deterministic outputs.
  • Async-safe set_headers_async support for both method-call and mapping-style response objects plus helper mocks and contract tests.

Testing

  • Added full contract tests for the header builders along with end-to-end coverage for Secure usage and response integration.

Docs

  • Expanded README with usage examples, advanced pipeline guidance, and updated framework integration references.

[1.0.1] - 2024-10-18

Fixed

  • Improved performance of Secure.set_headers by reducing redundant type checks. (#26)

[1.0.0] - 2024-09-27

Breaking Changes

  • Full redesign of the secure.py library with modern Python (3.10+) support.
  • Major API overhaul for improved usability and Pythonic design.

Added

  • Enhanced support for FastAPI and asynchronous frameworks.
  • Added type hints and better type annotations for a smoother developer experience.
  • Refined default security headers for improved protection across web frameworks.
  • Support for modern Python features such as the union operator (|) and cached_property.

[0.3.0] - 2021-04-27

Breaking Changes

  • Full redesign of Secure API.
  • Removal of cookie support.

Added

  • Added type hints for better developer experience.
  • Added support for FastAPI.

Changed

  • Replaced Feature-Policy with Permissions-Policy (#10).

[0.2.1] - 2018-12-24

Added

  • Added support for Masonite framework.
  • Added docstrings for SecureHeaders and SecureCookie.

Changed

  • Upper-cased SameSite enum to SameSite.LAX / SameSite.STRICT.
  • Modified hug implementation for SecureHeaders and SecureCookie.
  • Renamed Feature.Values.All to Feature.Values.All_ to avoid conflict with the built-in all.

Fixed

  • Removed trailing semicolon from Feature Policy.

[0.2.0] - 2018-12-16

Added

  • Added policy builder SecurePolicies in policies.py.
  • Added Expires header for legacy browser support.
  • Added max-age directive to Cache-Control header.

Changed

  • Renamed XXS argument to XXP.
  • Modified set-cookie to use Flask's native method.