secure v2.0.0rc1: presets redesign, ASGI/WSGI middleware, and header updates#40

Merged

cak merged 117 commits intomainfrom

Dec 16, 2025

Commits on Sep 28, 2025

Commits on Oct 25, 2025

Commits on Oct 29, 2025

refactor(headers): streamline validation and normalization logic
cak
committed

Commits on Nov 8, 2025

Commits on Dec 13, 2025

feat: enhance Cross-Origin-Resource-Policy implementation with improved documentation and additional methods
cak
committed
feat: enhance Permissions-Policy implementation with improved validation and documentation
cak
committed
feat: improve Referrer-Policy implementation with enhanced validation and comprehensive documentation
cak
committed
feat: enhance Strict-Transport-Security implementation with structured directives and improved documentation
cak
committed
feat: enhance Cache-Control documentation with improved structure and additional examples
cak
committed
feat: enhance Content-Security-Policy documentation with improved structure and additional examples
cak
committed
feat: enhance Cross-Origin-Embedder-Policy documentation with improved structure, directive values, and usage examples
cak
committed
feat: enhance Cross-Origin-Opener-Policy documentation with improved structure, clarity, and additional examples
cak
committed
feat: add Cross-Origin-Resource-Policy documentation with purpose, best practices, and examples
cak
committed
feat: enhance Permissions-Policy documentation with improved clarity, structure, and additional examples
cak
committed
feat: enhance Referrer-Policy documentation with improved clarity, structure, and additional examples
cak
committed
feat: enhance Strict-Transport-Security documentation with improved clarity, structure, and additional examples
cak
committed
feat: enhance X-Content-Type-Options documentation with improved clarity, structure, and additional examples
cak
committed
feat: enhance XDnsPrefetchControl documentation and improve method clarity with additional aliases
cak
committed
feat: add X-DNS-Prefetch-Control documentation with usage examples and API details
cak
committed
feat: enhance X-Frame-Options documentation with improved clarity, structure, and additional examples.
cak
committed
feat: enhance X-Frame-Options documentation with improved clarity, structure, and additional details (Refs #31)
cak
committed
feat: enhance X-Permitted-Cross-Domain-Policies documentation with improved clarity, structure, and additional directive methods
cak
committed
feat: add X-Permitted-Cross-Domain-Policies documentation with detailed usage examples and directives
cak
committed
feat: enhance Cache-Control class with improved directive handling and validation
cak
committed
feat: update Secure class to enhance cache handling and permissions policy
cak
committed
feat: update usage documentation with enhanced Cache-Control directives and additional security headers
cak
committed
feat: add comprehensive unit tests for Secure class header management
cak
committed
test: fix expected Cache-Control header values in unit tests
cak
committed
feat: add test suite for the top-level secure package
cak
committed
refactor: simplify header dictionary comprehensions in unit tests
cak
committed
feat: enhance security headers in README with updated Cache-Control and Content-Security-Policy directives
cak
committed
feat: implement header item resolution with override support in Secure class
cak
committed
feat: add validation and normalization tests for custom headers in Secure class
cak
committed
docs: clarify header normalization process in README
cak
committed
feat: add header value normalization to various headers for improved security
cak
committed
feat: add unit tests for header consistency and validation in test_headers.py
cak
committed
feat: update documentation for v2.0.0 migration, including package name changes and new presets
cak
committed
feat: add additional security headers validation in TestSecure class
cak
committed
feat: enhance header tests with additional assertions and new test cases for consistency and validation
cak
committed
feat: update MockResponseAwaitableSetHeader to return Awaitable in set_header method and adjust expected headers list in TestSecure
cak
committed
feat: update CHANGELOG for v2.0.0 release, detailing breaking changes, new features, testing enhancements, and documentation improvements
cak
committed
feat: update security presets to include a new BALANCED option and refactor CSP handling
cak
committed
feat: update documentation to reflect changes in presets and defaults, emphasizing the new BALANCED preset as the recommended default
cak
committed
feat: update tests to validate Balanced preset defaults and exclusions, ensuring correct header application
cak
committed

Commits on Dec 14, 2025

Commits on Dec 15, 2025

Commits on Dec 16, 2025