v3.4.0
What's Changed
- Deprecated X-Xss-Protection by @maxhelias in #342
- Deprecated the default signed cookie algorithm by @martijnc in #355
- Added
legacy_hash_algo
to support backward-compatiblehash_algo
changes in signed cookies by @martijnc in #351 - Added ability to set a custom CSP request matcher to define exactly which requests should receive CSP headers by @ihmels in #241
- Fixed DI Extension class deprecation with Symfony 7.1 by @norkunas in #350
- Fixed compatibility with twig 3.9 and yielding by @jderusse in #344 & #353
Full Changelog: v3.3.0...v3.4.0