search

github / secure_headers

Manages application of security headers with many safe defaults
MIT License
3.15k stars 251 forks source link

When will 3.0.0 be released? #210

Closed david-a-wheeler closed 8 years ago

david-a-wheeler commented 8 years ago

This gem looks awesome, but I usually wait until there's an official "it's released" announcement from the project, and I then get the gem from RubyGems. I looked on https://rubygems.org/gems/secure_headers and saw that 3.0.0.pre2 was posted December 22, 2015... but no actual 3.0.0.

Any idea when you'll declare victory and release 3.0.0? I couldn't figure out from the issue tracker what the blockers were (if any).

I'm hoping to become a new user :-).

Thanks!

oreoshake commented 8 years ago

Hi @david-a-wheeler,

Thanks for the interest. I am getting ready to pull the trigger, but I'm being extra cautious since this is such a significant rewrite. Some of the design is still being hammered out and may change soon.

Specifically we came across an issue where the protocol stripping (not present in the 2.x line) is causing an issue on safari (:fire: :hocho: :skull:) because safari's CSP support is terrible.

oreoshake commented 8 years ago

Not sure if you're following along but I just merged a few branches and pushed 3.0.0.pre3 to rubygems. I anticipate this will be the last pre release unless any bugs are uncovered but I want to let this version bake a little while.

david-a-wheeler commented 8 years ago

Thanks! I am looking forward to it!

oreoshake commented 8 years ago

:boom: https://github.com/twitter/secureheaders/releases/tag/v3.0.0 https://rubygems.org/gems/secure_headers/versions/3.0.0 :boom:

david-a-wheeler commented 8 years ago

Congrats!!