All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Placeholder for upcoming changes.
- Improved performance of
Secure.set_headers
by reducing redundant type checks. (#26)
- Full redesign of the
secure.py
library with modern Python (3.10+) support. - Major API overhaul for improved usability and Pythonic design.
- Enhanced support for FastAPI and asynchronous frameworks.
- Added type hints and better type annotations for a smoother developer experience.
- Refined default security headers for improved protection across web frameworks.
- Support for modern Python features such as the union operator (
|
) andcached_property
.
- Full redesign of Secure API.
- Removal of cookie support.
- Added type hints for better developer experience.
- Added support for FastAPI.
- Replaced Feature-Policy with Permissions-Policy (#10).
- Added support for Masonite framework.
- Added docstrings for
SecureHeaders
andSecureCookie
.
- Upper-cased SameSite enum to
SameSite.LAX
/SameSite.STRICT
. - Modified hug implementation for SecureHeaders and SecureCookie.
- Renamed
Feature.Values.All
toFeature.Values.All_
to avoid conflict with the built-inall
.
- Removed trailing semicolon from Feature Policy.
- Added policy builder
SecurePolicies
inpolicies.py
. - Added
Expires
header for legacy browser support. - Added
max-age
directive toCache-Control
header.
- Renamed
XXS
argument toXXP
. - Modified
set-cookie
to use Flask's native method.