packagist spatie/laravel-csp 3.31.1

4 hours ago

What's Changed

  • Fix the Maze preset by allowing https://api.maze.co in connect-src alongside the existing https://prompts.maze.co, and https://t.maze.co in frame-src, matching Maze's granular CSP guidance.
  • Preserve script-src https://snippet.maze.co; no wildcards or unrelated preset permissions are added. Update the exact-output preset snapshot.
  • Extend the CI matrix to test PHP 8.6 with Laravel 13 (#231).

No API, dependency requirement, or supported-version changes in this patch. Applications with additional CSP headers should ensure those policies also permit the Maze endpoints where intended.

Thanks to @chinmaypurav for the fix in #232.

Full Changelog: 3.31.0...3.31.1

Don't miss a new laravel-csp release

NewReleases is sending notifications on new releases.