Minor Changes
-
Add the initial release of
@remix-run/cop-middleware.- Expose
cop(options)for browser-focused cross-origin protection usingSec-Fetch-Site
withOriginfallback. - Support trusted origins, explicit insecure bypass patterns, and custom deny handlers.
- Allow apps to layer
cop()ahead ofsession()andcsrf()when they want both
browser-origin filtering and token-backed CSRF protection.
- Expose
Patch Changes
- Bumped
@remix-run/*dependencies: