0.14.2

What's Changed

• fix: nonce and ssg usage by @trijpstra-fourlights in #181

Full Changelog: v0.14.1...v0.14.2

0.14.1

What's Changed

• fix: nonce quirks when using ssr by @trijpstra-fourlights in #177
• fix: csp ssg by @Baroshem in #179

Full Changelog: v0.14.0...v0.14.1

0.14.0

What's Changed

• feat: add nonce support to csp by @trijpstra-fourlights in #171

New Contributors

• @trijpstra-fourlights made their first contribution in #171

Full Changelog: v0.13.1...v0.14.0

0.13.1

What's Changed

• docs: fix typo by @lanluartes in #139
• fix(docs): default value for Permissions-Policy by @tmlmt in #148
• Install options by @Droutin in #143
• feat: basic auth exclude routes option by @alexbidenko1998 in #145
• fix: add compatibility for modern module resolutions by @kyranet in #157

New Contributors

• @lanluartes made their first contribution in #139
• @tmlmt made their first contribution in #148
• @Droutin made their first contribution in #143
• @alexbidenko1998 made their first contribution in #145
• @kyranet made their first contribution in #157

Full Changelog: v0.13.0...v0.13.1

0.13.0

🚨 Breaking Changes

This Release introduces a new approach to registering security headers and middlewares by using the routeRules. I tried my best to provide backward compatibility but you may experience issues in your projects.

Basically, the configuration provided in security object in nuxt.config.ts is now used as a global configuration while any per-route configuration is now handled by routeRules.

Check out the docs to see the changes: https://nuxt-security.vercel.app/getting-started/configuration

What's Changed

• fix: basic auth by @Baroshem in #126
• feat: #109 routeRules support by @Baroshem in #129
• feat: #116 add vitest tests by @Baroshem in #131
• 0.13.0 by @Baroshem in #130

Full Changelog: v0.12.0...v0.13.0

0.12.0

What's Changed

• feat: #114 migrate cors by @Baroshem in #119
• feat: #118 cors default origin by @Baroshem in #120
• feat: #117 add permisions policy by @Baroshem in #121

Full Changelog: v0.11.0...v0.12.0

0.11.0

What's Changed

• [documentation] Fixed typo for "anti-trojan-source" by @mubaidr in #99
• Fix incorrect auth condition in basic-auth by @Tristan971 in #102
• chore: bump nuxt to 3.2.0 by @Baroshem in #105
• docs: rewrite by @Baroshem in #110
• feat: csrf by @Baroshem in #111
• docs: use security checklists by @Baroshem in #113
• feat: enable CSP for SSG by @tresko in #112
• chore: small corrections before release by @Baroshem in #115

New Contributors

• @mubaidr made their first contribution in #99
• @Tristan971 made their first contribution in #102
• @tresko made their first contribution in #112

Full Changelog: v0.10.2...v0.11.0

0.10.2

What's Changed

• [Fix] Module Options by @runyasak in #88
• docs: add stackblitz to repo by @Baroshem in #91
• Docs/add stackblitz to repo by @Baroshem in #92
• fix: nuxt 3.1.X x-powered-by by @Baroshem in #94

New Contributors

• @runyasak made their first contribution in #88

Full Changelog: v0.10.1...v0.10.2

0.10.1

What's Changed

• fix: add runtime dir to nitro inline array by @pi0 in #84

New Contributors

• @pi0 made their first contribution in #84

Full Changelog: v0.10.0...v0.10.1

0.10.0

What's Changed

• fix: use custom merger for options to avoid array values concatenation by @Qrzy in #80
• docs: add video tutorial by @Baroshem in #76
• feat: optional throw error by @Baroshem in #75
• feat: add enabled config option by @Baroshem in #72

Full Changelog: v0.9.0...v0.10.0