Stott Security 2.5

[GeekInTheNorth]

Version 2.5

This update has been published to api.nuget.optimizely.com and nuget.org.

Features

• Possibility to add custom report url #184
  • Added the ability to on/off the use of the Internal CSP Reporting endpoints.
    • If the internal CSP Reporting functionality is disabled. These endpoints will return a 200 response stating no data has been retained.
  • Added the ability to define external CSP Reporting endpoints.
    • These will validate your endpoint responds correctly to a CSP report.
  • Updated the Violations tab to show if the internal reporting mechanism is disabled or not.
  • Created a new URL component for use for the new External Reporting URLs and updated the External Allowlist URL property to use this new component.

Bugs

• 500 Error occurs when overriding Cache Control Header for static files #197
  • If you had code that added the Cache-Control header that executed before the retrieval of JS and CSS artefacts for the admin page, then these would fail to load due to a duplicate header error.
  • Refactored logic for adding or updating headers to be more reusable.
  • Corrected the endpoint for getting the JS & CSS for the administration endpoint to use the new safer logic.

---

Help me celebrate this release with a coffee! ☕️