lusca

Application security for express apps.

OTHER License

Downloads
269K
Stars
1.8K
Committers
39

Bot releases are hidden (Show)

lusca - v1.6.1 Latest Release

Published by linkRace about 6 years ago

  • Fixes issue with multiple blacklist/whitelist options
  • Typo in README
lusca - v1.6.0

Published by linkRace over 6 years ago

Adds in whitelist and blacklist support for csrf

lusca - v1.5.2

Published by linkRace about 7 years ago

Bugfix: Add style/script directive if nonce is true and only default-src set

lusca - v1.5.1

Published by linkRace about 7 years ago

Bugfix: style-src nonce updates properly, speed improvement on match

lusca - v1.5.0

Published by linkRace about 7 years ago

Support for nonce for either style-src, script-src, or both
Lower case headers for improved performance
Support for referrer-policy
Allow CSRF cookie options to be set
Bugfix: return to suppress promise warning