- no changes in this release.
- New #68: Add the
CsrfHeaderMiddleware
middleware to use custom HTTP header to prevent forgery of requests (@olegbaturin) - Chg #71: Deprecate
CsrfMiddleware
in favor ofCsrfTokenMiddleware
(@ev-gor) - Enh #68: Add the
CsrfMiddleware::withSafeMethods()
method to configure a custom safe HTTP methods list (@olegbaturin)
- Enh #55: Add support for
psr/http-message
version^2.0
(@vjik)
- New #53: Add
StubCsrfToken
(@hacan359) - Bug #36: Explicitly add transitive dependencies
yiisoft/strings
,psr/http-server-handler
andext-hash
(@vjik, @xepozz)
- Chg #43: Adapt configuration group names to Yii conventions (@vjik)
- Enh #44: Add support of
yiisoft/session
version^2.0
(@vjik)
- Chg #31: Update
yiisoft/http
dependency (@devanych) - Enh #30: Add a custom failure handler feature to
CsrfMiddleware
(@solventt, @devanych)
- New #29: Add methods
CsrfMiddleware::getParameterName()
andCsrfMiddleware::getHeaderName()
(@vjik)
- Chg #28: Use definitions from
yiisoft/definitions
in configuration (@vjik)
- Chg: Adjust config for
yiisoft/factory
changes (@vjik, @samdark)
- Chg: Adjust config for new config plugin (@samdark)
- Initial release.