Baroshem/nuxt-security v2.2.0

on GitHub

This version introduces a new feature to the rate limiter middleware by adding a whitelist option, along with several related changes to the codebase and documentation.

New Feature: Whitelist Option for Rate Limiter

• Rate Limiter Configuration:

  • Added a whiteList property to the RateLimiter type, allowing specific IP addresses to bypass rate limiting. (docs/content/3.middleware/1.rate-limiter.md, src/types/middlewares.ts, src/defaultConfig.ts) [1] [2] [3]
  • Updated documentation to include details about the new whiteList property. (docs/content/3.middleware/1.rate-limiter.md)

• Security Configuration:

  • Fixed an issue where securityConfig was not correctly initialized in the basic authentication middleware. (src/runtime/server/middleware/basicAuth.ts)

• Nonce Handling:

  • Improved the handling of nonces in CSP headers by ensuring existing nonces are replaced instead of duplicated. (src/runtime/nitro/plugins/40-cspSsrNonce.ts) [1] [2]

What's Changed

• Bug reports in repo: Use new template forms by @vejja in #578
• bug reports: update placeholders by @vejja in #579
• Update bug-report.yml by @vejja in #581
• docs(fix): readme license link by @IO-Fire in #591
• [ci skip] docs: update license year by @IO-Fire in #592
• Enhance header filtering in getHeadersApplicableToAllResources function to exclude falsy values by @ivanvakulov in #588
• Update GitHub question issue template with the correct link by @nicokempe in #600
• Fix/docs typo by @fahdarafat in #596
• fix(nonce): override user-defined nonce values with Nuxt Image by @GalacticHypernova in #593
• Add basic rate limiter whitelist (specific IPs only) by @zguig52 in #573
• Refactor basicAuth middleware to use runtime configuration correctly by @ivanvakulov in #599
• Chore/2.2.0 by @Baroshem in #607

New Contributors

• @IO-Fire made their first contribution in #591
• @ivanvakulov made their first contribution in #588
• @nicokempe made their first contribution in #600
• @fahdarafat made their first contribution in #596
• @zguig52 made their first contribution in #573

Full Changelog: v2.1.5...v2.2.0