@mcansh/[email protected]

Minor Changes

• 0908d16: update react and react-dom peerDependencies to support react 18 and react 19

@mcansh/[email protected]

Patch Changes

• 4105e69: add support for interest-cohort to permissions policy

@mcansh/[email protected]

Patch Changes

• 81a7d9e: remove dependency on node:crypto using the crypto global instead

@mcansh/[email protected]

Minor Changes

• af61382: move createNonce helper function to main import
  add type to imports where missing

Patch Changes

• 4597846: dont allow mixing kebab-case and camelCase csp keys and make it so csp isnt required

@mcansh/[email protected]

Patch Changes

• 4597846: dont allow mixing kebab-case and camelCase csp keys and make it so csp isnt required

@mcansh/[email protected]

Patch Changes

• f0a2ee3: feat: only allow using kebab or camel case, not both

@mcansh/[email protected]

Minor Changes

• 9b7cc24: feat: filter out falsy values from csp

  // before
  createContentSecurityPolicy({
    "connect-src": [undefined, "'self'", undefined].filter((x): x is string => !!x),
  });
  // => `"connect-src 'self'"`
  
  // after
  createContentSecurityPolicy({
    "connect-src": [undefined, "'self'", null],
  });
  
  // => `"connect-src 'self'"`

Patch Changes

• 9b7cc24: apply upgrade-insecure-requests when using kebab case to set it

  previously was only applying the upgrade-insecure-requests directive when using camelCase (upgradeInsecureRequests)

@mcansh/[email protected]

Patch Changes

• c4b0b6a: allow using kebab case keys for csp

  let secureHeaders = createSecureHeaders({
    "Content-Security-Policy": {
      "default-src": ["'self'"],
      "img-src": ["'self'", "data:"],
    },
  });

• 1cee380: allow setting Content-Security-Policy-Report-Only

  let secureHeaders = createSecureHeaders({
    "Content-Security-Policy-Report-Only": {
      "default-src": ["'self'"],
      "img-src": ["'self'", "data:"],
    },
  });

@mcansh/[email protected]

Patch Changes

• 8e1c380: bump dependencies to latest versions
• 6919888: add nonce generation, context provider, and hook for React and Remix apps

@mcansh/[email protected]

Patch Changes

• ba87f33: add funding to package.json