v0.1.0

Author: dvershinin

CHANGELOG.md

@@ -1,6 +1,11 @@
 # Changelog
 All notable changes to this project will be documented in this file.
 
+## [0.1.0] - 2023-09-06
+#### Fixed
+* HSTS set to 1 year instead of 2 years by default (#18)
+* New default `X-XSS-Protection: 0`, see #19
+
 ## [0.0.11] - 2022-03-18
 #### Fixed
 * Sending HSTS header no longer requires building with OpenSSL #12

README.md

@@ -27,7 +27,7 @@ Connection: keep-alive
 X-Content-Type-Options: nosniff
 X-XSS-Protection: 0
 Referrer-Policy: strict-origin-when-cross-origin
-Strict-Transport-Security: max-age=63072000; includeSubDomains; preload</b>
+Strict-Transport-Security: max-age=31536000; includeSubDomains; preload</b>
 </pre>
 
 In general, the module features sending security HTTP headers in a way that better conforms to the standards.