v3.6.0

3.6.0 (2024-07-08)

Features

• add hostnameExceptionList for ssrf (#100) (92a34f3)

---

This release is also available on:

• npm package (@latest dist-tag)

v3.5.0

3.5.0 (2024-07-03)

Features

• add rotateWhenInvalid option for CSRF token (#98) (ae37c8f)

---

This release is also available on:

• npm package (@latest dist-tag)

v3.4.0

3.4.0 (2024-07-01)

Features

• support SSRF check on useHttpClientNext = true (#96) (1d6bfff)

---

This release is also available on:

• npm package (@latest dist-tag)

v3.3.1

3.3.1 (2024-06-12)

Bug Fixes

• use @eggjs/ip instead of ip (#95) (5e3ee95)

---

This release is also available on:

• npm package (@latest dist-tag)

v3.3.0

3.3.0 (2024-05-29)

Features

• use ip@v2 (#93) (ffb761d)

---

This release is also available on:

• npm package (@latest dist-tag)

v3.2.0

3.2.0 (2024-01-04)

Features

• CSRF cookies allow the use of signatures (#88) (da1b532)

---

This release is also available on:

• npm package (@latest dist-tag)

v3.1.0

3.1.0 (2023-08-09)

Features

• context 中的 isSafeDomain() 函数增加自定义白名单参数 (#86) (a178552)

---

This release is also available on:

• npm package (@latest dist-tag)

v3.0.0

3.0.0 (2023-05-10)

⚠ BREAKING CHANGES

• drop Node.js < 14 support

Features

• upgrade deps to latest versions (#82) (c3ca817)

---

This release is also available on:

• npm package (@latest dist-tag)