Releases for Security Kit

SA-CONTRIB-2024-039

Changes since 2.0.2-rc1:

• #3469137 by mcdruid: Add testing of report-csp-violation

Changes since 7.x-1.11:

Drupal 10 compatibility.

2.0.0 first Release Candidate

Only change since 8.x-1.2 is Drupal 9 compatibility (core_version_requirement change and compatibility fixes of the module's tests). See:

https://git.drupalcode.org/project/seckit/commit/2e3afd6

Full release to follow in a couple of weeks if there are no problems with this RC1.

Changes since 7.x-1.10:

Changes since 8.x-1.1:

Changes since 8.x-1.1:

7.x-1.10 full release. This is identical to 7.x-1.10-rc1.

#2480527: Migrate to a better CSP report URL changes the (default) destination URL advertised for CSP reports -- from /admin/config/system/seckit/csp-report to /report-csp-violation

Changes since 7.x-1.9:

Changes since 8.x-1.0-alpha1:

Initial Drupal 8 development release.

See: https://www.drupal.org/project/issues/seckit?version=8.x&status=All

This release addresses the following issues, and also adds a status report warning when report-only mode is enabled for CSP reports.

n.b. Consider testing 7.x-1.9-rc1.

Please 'follow' #2200671: 7.x-1.9 release candidate to track any additional release candidates prior to the stable release.

Release notes for 7.x-1.8:

The following bugs have been fixed since 1.7:

#2091627: CSP report-uri and policy-uri directives are relative to current URL rather than to base URL CSP report-uri directive is relative (Thanks @jweowu)

#2043283: Default all features to disabled

#1893038: Support Allow-From in X-Frame-Options
#1809020: Access denied with XAMPP + seckit in installation profile

#1777704: Conflicts with D7 overlay
#1765080: Typo in seckit description

#1298742: Added option for setting custom noscript message
#1243032: Override style for frames option is removed
#1241226: Updated CSP to the new specification

Major:
- X-Content-Type-Options
- From-Origin

Minor:
- Updated CSP and Origin implementation
- Small bugfixes

#1124380: Updated CSP to the new specification
#1188984: Added Google Chrome CSP support

Initial release

Initial release

Finally fixed http://localize.drupal.org/translate/projects/seckit/releases/217159