README.md in secure_headers-2.2.3 vs README.md in secure_headers-2.2.4
- old
+ new
@@ -47,11 +47,11 @@
config.x_xss_protection = {:value => 1, :mode => 'block'}
config.x_download_options = 'noopen'
config.x_permitted_cross_domain_policies = 'none'
config.csp = {
:default_src => "https: self",
- :enforce => proc {|controller| contoller.current_user.enforce_csp? },
+ :enforce => proc {|controller| controller.current_user.enforce_csp? },
:frame_src => "https: http:.twimg.com http://itunes.apple.com",
:img_src => "https:",
:report_uri => '//example.com/uri-directive'
}
config.hpkp = {
@@ -417,10 +417,10 @@
## Similar libraries
* Node.js (express) [helmet](https://github.com/evilpacket/helmet) and [hood](https://github.com/seanmonstar/hood)
* Node.js (hapi) [blankie](https://github.com/nlf/blankie)
-* J2EE Servlet >= 3.0 [highlines](https://github.com/sourceclear/headlines)
+* J2EE Servlet >= 3.0 [headlines](https://github.com/sourceclear/headlines)
* ASP.NET - [NWebsec](https://github.com/NWebsec/NWebsec/wiki)
* Python - [django-csp](https://github.com/mozilla/django-csp) + [commonware](https://github.com/jsocol/commonware/); [django-security](https://github.com/sdelements/django-security)
* Go - [secureheader](https://github.com/kr/secureheader)
## Authors