v3.6.0

What's Changed

• fix: Make PHPStan green by @silasjoisten in #378
• chore: Manual CS fix by @silasjoisten in #379
• feat(security): Add Permissions-Policy header support by @silasjoisten in #373
• feat(permissions-policy): Change header behaviour by @silasjoisten in #381

New Contributors

• @silasjoisten made their first contribution in #378

Full Changelog: v3.5.1...v3.6.0

v3.5.1

What's Changed

• Fixed BC break introduced in 3.5.0 by @martijnc in #370

Full Changelog: v3.5.0...v3.5.1

v3.5.0

What's Changed

• Added support for the report-to directive by @martijnc in #357
• Added DirectiveSetBuilderInterface to allow runtime modification of CSP rules by @martijnc in #348
• Fixed ExternalRedirectListener issue parsing some invalid URLs by @Seldaek in #364

Full Changelog: v3.4.2...v3.5.0

v3.4.2

What's Changed

• Fix Twig version check to not depend on changing VERSION_ID constant by @glaubinix in #361

New Contributors

• @glaubinix made their first contribution in #361

Full Changelog: v3.4.1...v3.4.2

v3.4.1

What's Changed

• Fix twig deprecation warning with twig 3.12 by @pscheit in #359

Full Changelog: v3.4.0...v3.4.1

v3.4.0

What's Changed

• Deprecated X-Xss-Protection by @maxhelias in #342
• Deprecated the default signed cookie algorithm by @martijnc in #355
• Added legacy_hash_algo to support backward-compatible hash_algo changes in signed cookies by @martijnc in #351
• Added ability to set a custom CSP request matcher to define exactly which requests should receive CSP headers by @ihmels in #241
• Fixed DI Extension class deprecation with Symfony 7.1 by @norkunas in #350
• Fixed compatibility with twig 3.9 and yielding by @jderusse in #344 & #353

Full Changelog: v3.3.0...v3.4.0

v3.3.0

What's Changed

• Introduce ExternalRedirectResponse by @martijnc in #331

New Contributors

• @martijnc made their first contribution in #331

Full Changelog: v3.2.0...v3.3.0

v3.2.0

What's Changed

• Added support for cookies with null value by @SerheyDolgushev in #338

Full Changelog: v3.1.1...v3.2.0

v3.1.1

• Filter view-source reports by @fritzmg in #333

Full Changelog: v3.1.0...v3.1.1

v3.1.0

• Fixed overriding CSP header
• Dropped support for Symfony < 5.4
• Added support for Symfony 7