Laravel Csp Laravel Package

What's Changed

• chore: update snapshots to Pest V4 by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/216
• chore: Add Firebase CSP by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/215
• Add support for Pest 5 by @freekmurze in https://github.com/spatie/laravel-csp/pull/217

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.26.0...3.27.0

What's Changed

• Add a There There preset by @freekmurze in https://github.com/spatie/laravel-csp/pull/213
• Drop roave/security-advisories to unblock CI by @freekmurze in https://github.com/spatie/laravel-csp/pull/214

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.25.1...3.26.0

What's Changed

• Chore: add Algolia insights domain by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/212

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.25.0...3.25.1

What's Changed

• Support separate report endpoints for the report-only CSP policy by @freekmurze in https://github.com/spatie/laravel-csp/pull/211

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.24.1...3.25.0

What's Changed

• Add Directive::IMG:Scheme::DATA for Bootstrap by @weshooper in https://github.com/spatie/laravel-csp/pull/209

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.24.0...3.24.1

What's Changed

• Remove deprecated block-all-mixed-content directive from README by @weshooper in https://github.com/spatie/laravel-csp/pull/206
• Add report-to support without removing report-uri by @freekmurze in https://github.com/spatie/laravel-csp/pull/208

New Contributors

• @weshooper made their first contribution in https://github.com/spatie/laravel-csp/pull/206

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.23.1...3.24.0

What's Changed

• Switch to scoped singletons to support Laravel Octane by @m-fi in https://github.com/spatie/laravel-csp/pull/205

New Contributors

• @m-fi made their first contribution in https://github.com/spatie/laravel-csp/pull/205

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.23.0...3.23.1

What's Changed

• Add Laravel 13 support

What's Changed

• feat: Add Rollbar CSP preset by @MoT3rror in https://github.com/spatie/laravel-csp/pull/200

New Contributors

• @MoT3rror made their first contribution in https://github.com/spatie/laravel-csp/pull/200

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.20.0...3.21.0

What's Changed

• Google Maps Preset by @nessimabadi in https://github.com/spatie/laravel-csp/pull/199

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.19.0...3.20.0

What's Changed

• feat: Chargebee CSP Preset by @shawnhooper in https://github.com/spatie/laravel-csp/pull/197
• feat: TrackJS CSP Preset by @shawnhooper in https://github.com/spatie/laravel-csp/pull/198

New Contributors

• @shawnhooper made their first contribution in https://github.com/spatie/laravel-csp/pull/197

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.18.0...3.19.0

What's Changed

• Feat: add SurveyMonkey preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/196

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.17.2...3.18.0

What's Changed

• Fix: update JsDelivr preset to include connect-src directive by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/195

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.17.1...3.17.2

What's Changed

• Update issue template by @AlexVanderbist in https://github.com/spatie/laravel-csp/pull/193
• Add European/German location URL for Sentry by @pelmered in https://github.com/spatie/laravel-csp/pull/194

New Contributors

• @AlexVanderbist made their first contribution in https://github.com/spatie/laravel-csp/pull/193
• @pelmered made their first contribution in https://github.com/spatie/laravel-csp/pull/194

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.17.0...3.17.1

What's Changed

• Chore: add missing tests for presets by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/192
• Feat: added Alchemer survey preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/191
• Fix: vimeo preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/190

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.16.0...3.17.0

What's Changed

• feat: add bootstrap preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/189
• feat: add vwo preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/188
• feat: add maze preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/187
• feat: add jquery preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/185
• feat: heap analytics preset added by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/186
• feat: add cloudflare cdn preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/183
• feat: added google lookerstudio preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/184

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.15.0...3.16.0

What's Changed

• feat: sentry preset added by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/182
• feat: whereby CSP preset added by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/181

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.14.0...3.15.0

What's Changed

• Update README.md Vite Nonce Generator Imports by @nessimabadi in https://github.com/spatie/laravel-csp/pull/180
• Feat: add algolia preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/179

New Contributors

• @chinmaypurav made their first contribution in https://github.com/spatie/laravel-csp/pull/179

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.13.1...3.14.0

What's Changed

• Docs| Hint the usage of a base64-value for generated nonces by @YasserB94 in https://github.com/spatie/laravel-csp/pull/177
• Fix Trusted Types keyword and clarify Preset interface implementation by @leopoletto in https://github.com/spatie/laravel-csp/pull/178

New Contributors

• @YasserB94 made their first contribution in https://github.com/spatie/laravel-csp/pull/177
• @leopoletto made their first contribution in https://github.com/spatie/laravel-csp/pull/178

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.13.0...3.13.1

What's Changed

• Adds Hireroad/Vacancy Filler Recruitment Preset by @atomicjam in https://github.com/spatie/laravel-csp/pull/176

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.12.0...3.13.0

What's Changed

• Add Policy@setReportUri() method by @hivokas in https://github.com/spatie/laravel-csp/pull/175

New Contributors

• @hivokas made their first contribution in https://github.com/spatie/laravel-csp/pull/175

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.11.1...3.12.0

What's Changed

• Use correct format for directives by @adamjgriffith in https://github.com/spatie/laravel-csp/pull/167
• HotJar Updates for FONT/STYLE/IMG Directives by @atomicjam in https://github.com/spatie/laravel-csp/pull/170
• Fathom Preset Missing Connect by @bashgeek in https://github.com/spatie/laravel-csp/pull/171
• MetaPixel Preset is missing connect by @bashgeek in https://github.com/spatie/laravel-csp/pull/174
• GoogleTagManager Preset Missing URL by @bashgeek in https://github.com/spatie/laravel-csp/pull/173
• GoogleAnalytics Preset Missing Some URL's by @bashgeek in https://github.com/spatie/laravel-csp/pull/172

New Contributors

• @bashgeek made their first contribution in https://github.com/spatie/laravel-csp/pull/171

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.11.0...3.11.1

What's Changed

• Allow tag manager noscript fallback by @adamjgriffith in https://github.com/spatie/laravel-csp/pull/166

New Contributors

• @adamjgriffith made their first contribution in https://github.com/spatie/laravel-csp/pull/166

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.10.0...3.11.0

What's Changed

• Add configuration for Vite hot reloading by @ziadoz in https://github.com/spatie/laravel-csp/pull/165

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.9.0...3.10.0

What's Changed

• Add HotJar preset by @ziadoz in https://github.com/spatie/laravel-csp/pull/163

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.8.2...3.9.0

What's Changed

• Update README.md by @nessimabadi in https://github.com/spatie/laravel-csp/pull/162
• Ensure correct report_uri is applied for report-only CSP policies by @andrextor in https://github.com/spatie/laravel-csp/pull/164

New Contributors

• @nessimabadi made their first contribution in https://github.com/spatie/laravel-csp/pull/162
• @andrextor made their first contribution in https://github.com/spatie/laravel-csp/pull/164

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.8.1...3.8.2

What's Changed

• Captcha Services Presets by @atomicjam in https://github.com/spatie/laravel-csp/pull/160

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.8.0...3.8.1

What's Changed

• Preset for Meta Pixels by @atomicjam in https://github.com/spatie/laravel-csp/pull/159

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.7.0...3.8.0

What's Changed

• Add Vimeo preset by @rbibby in https://github.com/spatie/laravel-csp/pull/158

New Contributors

• @rbibby made their first contribution in https://github.com/spatie/laravel-csp/pull/158

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.6.0...3.7.0

What's Changed

• 3 Presets (Stripe, Plausible, TicketTailor) by @atomicjam in https://github.com/spatie/laravel-csp/pull/156
• Skip CSP middleware when Vite is hot reloading by @ziadoz in https://github.com/spatie/laravel-csp/pull/154

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.5.0...3.6.0

What's Changed

• docs: remove return from v3 upgrade guide by @audunru in https://github.com/spatie/laravel-csp/pull/153
• Add Microsoft Clarity Preset by @atomicjam in https://github.com/spatie/laravel-csp/pull/155

New Contributors

• @audunru made their first contribution in https://github.com/spatie/laravel-csp/pull/153
• @atomicjam made their first contribution in https://github.com/spatie/laravel-csp/pull/155

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.4.0...3.5.0

What's Changed

• Add Cloudflare Web Analytics preset by @ohiader in https://github.com/spatie/laravel-csp/pull/152

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.3.0...3.4.0

What's Changed

• Google TLDs CSP preset by @christianschoenmakers in https://github.com/spatie/laravel-csp/pull/148
• Posthog CSP preset by @christianschoenmakers in https://github.com/spatie/laravel-csp/pull/149

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.2.0...3.3.0

What's Changed

• Intercom preset by @christianschoenmakers in https://github.com/spatie/laravel-csp/pull/147
• Bunny Fonts preset by @ndeblauw in https://github.com/spatie/laravel-csp/pull/150
• Skip CSP middleware when Laravel is rendering an exception by @ziadoz in https://github.com/spatie/laravel-csp/pull/151

New Contributors

• @christianschoenmakers made their first contribution in https://github.com/spatie/laravel-csp/pull/147
• @ndeblauw made their first contribution in https://github.com/spatie/laravel-csp/pull/150
• @ziadoz made their first contribution in https://github.com/spatie/laravel-csp/pull/151

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.1.0...3.2.0

What's Changed

• Update migration guide to use $policy by @patrickomeara in https://github.com/spatie/laravel-csp/pull/144
• Update README.md by @jackbayliss in https://github.com/spatie/laravel-csp/pull/145
• Ensure null values are removed by @jackbayliss in https://github.com/spatie/laravel-csp/pull/146
• Cloudflare Turnstile preset by @ohiader in https://github.com/spatie/laravel-csp/pull/143

New Contributors

• @patrickomeara made their first contribution in https://github.com/spatie/laravel-csp/pull/144
• @jackbayliss made their first contribution in https://github.com/spatie/laravel-csp/pull/145
• @ohiader made their first contribution in https://github.com/spatie/laravel-csp/pull/143

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.0.0...3.1.0

What's Changed

• Add support for Laravel 12 by @mfn in https://github.com/spatie/laravel-csp/pull/136

New Contributors

• @mfn made their first contribution in https://github.com/spatie/laravel-csp/pull/136

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.10.2...2.10.3

What's Changed

• Fix getting Blade compiler by @CicerBro in https://github.com/spatie/laravel-csp/pull/134
• Add ability to skip nonce generation by @juliangums in https://github.com/spatie/laravel-csp/pull/132

New Contributors

• @CicerBro made their first contribution in https://github.com/spatie/laravel-csp/pull/134
• @juliangums made their first contribution in https://github.com/spatie/laravel-csp/pull/132

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.10.1...2.10.2

What's Changed

• Update README.md by @federico-boncaldo in https://github.com/spatie/laravel-csp/pull/127
• chore: update Git Attributes by @owenvoke in https://github.com/spatie/laravel-csp/pull/129
• Mark arguments as nullable in AddCspHeaders by @jnoordsij in https://github.com/spatie/laravel-csp/pull/128

New Contributors

• @federico-boncaldo made their first contribution in https://github.com/spatie/laravel-csp/pull/127
• @owenvoke made their first contribution in https://github.com/spatie/laravel-csp/pull/129
• @jnoordsij made their first contribution in https://github.com/spatie/laravel-csp/pull/128

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.10.0...2.10.1

What's Changed

• feat: added missing 'wasm-unsafe-eval' keyword by @fxnm in https://github.com/spatie/laravel-csp/pull/125

New Contributors

• @fxnm made their first contribution in https://github.com/spatie/laravel-csp/pull/125

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.9.0...2.10.0

What's Changed

• Fix incorrect namespaces in README.md by @dnwjn in https://github.com/spatie/laravel-csp/pull/121
• chore: prepare for laravel 11 by @joostdebruijn in https://github.com/spatie/laravel-csp/pull/124

New Contributors

• @dnwjn made their first contribution in https://github.com/spatie/laravel-csp/pull/121
• @joostdebruijn made their first contribution in https://github.com/spatie/laravel-csp/pull/124

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.8.4...2.9.0

What's Changed

• Removed expired link from readme file by @DevYunus in https://github.com/spatie/laravel-csp/pull/118
• Add require-trusted-types-for directive by @nicolasbeauvais in https://github.com/spatie/laravel-csp/pull/120

New Contributors

• @DevYunus made their first contribution in https://github.com/spatie/laravel-csp/pull/118
• @nicolasbeauvais made their first contribution in https://github.com/spatie/laravel-csp/pull/120

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.8.3...2.8.4

What's Changed

• Add PHP 8.2 Support by @patinthehat in https://github.com/spatie/laravel-csp/pull/109
• Improve grammar and formatting of readme by @rubenvanerk in https://github.com/spatie/laravel-csp/pull/112
• fix github test badge by @askdkc in https://github.com/spatie/laravel-csp/pull/113

New Contributors

• @patinthehat made their first contribution in https://github.com/spatie/laravel-csp/pull/109
• @rubenvanerk made their first contribution in https://github.com/spatie/laravel-csp/pull/112
• @askdkc made their first contribution in https://github.com/spatie/laravel-csp/pull/113

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.8.2...2.8.3

What's Changed

• Add wss: (secure websocket) scheme support by @bitwise-operators in https://github.com/spatie/laravel-csp/pull/105

New Contributors

• @bitwise-operators made their first contribution in https://github.com/spatie/laravel-csp/pull/105

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.8.1...2.8.2

What's Changed

• Lazily register blade directives by @axlon in https://github.com/spatie/laravel-csp/pull/104

New Contributors

• @axlon made their first contribution in https://github.com/spatie/laravel-csp/pull/104

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.8.0...2.8.1

What's Changed

• Fixing readme issues by @lukeclifton in https://github.com/spatie/laravel-csp/pull/88
• Update README.md by @melicerte in https://github.com/spatie/laravel-csp/pull/90
• Update README.md by @melicerte in https://github.com/spatie/laravel-csp/pull/91
• Rewrite tests to use Pest by @Magiczne in https://github.com/spatie/laravel-csp/pull/92
• Wrong method name for Vite nonce by @rcerljenko in https://github.com/spatie/laravel-csp/pull/102
• Adds a new [@cspMetaTag](https://github.com/cspMetaTag) blade directive by @lukeraymonddowning in https://github.com/spatie/laravel-csp/pull/103

New Contributors

• @lukeclifton made their first contribution in https://github.com/spatie/laravel-csp/pull/88
• @melicerte made their first contribution in https://github.com/spatie/laravel-csp/pull/90
• @Magiczne made their first contribution in https://github.com/spatie/laravel-csp/pull/92
• @rcerljenko made their first contribution in https://github.com/spatie/laravel-csp/pull/102
• @lukeraymonddowning made their first contribution in https://github.com/spatie/laravel-csp/pull/103

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.7.0...2.8.0

• support Laravel 9

• add support for PHP 8

• add prefetch-src directive (#77)

• add unsafe-hashes keyword

• Add support for Laravel 8

• added "report-to" directive (#71)

• add websockets scheme support (#65)

• Add Laravel 7 support
• Add None override

• Add Laravel 6.0 support

• add webrtc-src directive

• drop support for Laravel 5.7 and below
• drop support for PHP 7.1 and below

• add support for Laravel 5.8

• replace str_random and starts_with helpers to its class based counterpart

• use Arr:: and Str:: functions

• add new script and style directives

• moved most values in Value to Keyword
• remove deprecated cspValue function

• add possibility to change value to no value

• support for Laravel 5.7

• fix compatibility with Lumen

• make compatible with Lumen

• add value constant for data:

• fix blade directive

• improvements around quoting values

• add csp_nonce function

• add value constants

• add support for PHP 7.0

• fix blade directive

• improve base profile

• fix directory name

• fix naming of classes

BROKEN VERSION, DO NOT USE

• initial release