Bump csp to 0.2.0

helmetjs · Jan 22, 2015 · 650b4b7 · 650b4b7
1 parent fd4fda5
commit 650b4b7
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 1 deletion.
diff --git a/HISTORY.md b/HISTORY.md
@@ -1,3 +1,10 @@
+0.6.0 / 2015-01-21
+==================
+
+- new: you can disable `csp` for Android
+
+- fix: `csp` on Chrome Mobile on Android and iOS
+
 0.5.4 / 2014-12-21
 ==================
 

diff --git a/README.md b/README.md
@@ -83,6 +83,7 @@ app.use(helmet.contentSecurityPolicy({
   reportUri: '/report-violation',
   reportOnly: false, // set to true if you only want to report errors
   setAllHeaders: false, // set to true if you want to set all headers
+  disableAndroid: false, // set to true if you want to disable Android (browsers can vary and be buggy)
   safari5: false // set to true if you want to force buggy CSP in Safari 5
 }));
 ```

diff --git a/package.json b/package.json
@@ -31,7 +31,7 @@
     "dont-sniff-mimetype": "0.1.0",
     "frameguard": "0.2.0",
     "helmet-crossdomain": "0.1.0",
-    "helmet-csp": "0.1.2",
+    "helmet-csp": "0.2.0",
     "hide-powered-by": "0.1.0",
     "hsts": "0.1.0",
     "ienoopen": "0.1.0",