Releases: vaersaagod/toolmate
Releases · vaersaagod/toolmate
ToolMate v. 1.4.2
ToolMate v. 1.4.1
1.4.1 - 2022-05-19
Improved
- ToolMate now removes any hard-coded nonces or hashes set in the CSP config, for any directives that also contain the
unsafe-inline
policy - ToolMate now avoids inadvertently creating CSP directives that could be empty, when adding nonces
ToolMate v. 1.4.0
1.4.0 - 2022-05-14
Added
- Craft domains (i.e. Craft ID and the plugin store API) are now automatically included in the
connect-src
directive for control panel requests unsafe-inline
directives are now added automatically for Yii error pages
Fixed
- Fixes an issue where unhashed CSP nonces would not be included in the actual CSP header, on Craft 4.0
Changed
- Refactored logic concerning how and when the CSP header is set
ToolMate v. 1.3.1
1.3.1 - 2022-05-12
Fixed
- Fixed an issue where ToolMate failed to include the
'unsafe-inline'
policy resource for thestyle-src
CSP directive, for site requests where the Yii debug toolbar is enabled
ToolMate v. 1.2.0.1
1.2.0.1 - 2022-02-14
Fixed
- Fixes an issue where Toolmate wasn't able to set the public web root path correctly
ToolMate v. 1.2.0
1.2.0 - 2022-02-13
Added
- Added
Settings::csp
for configuring the Content-Security-Policy header - Added the
cspNonce()
Twig function for outputting a CSP nonce attribute or value
ToolMate v. 1.1.0
1.1.0 - 2021-10-06
Added
- Added
Settings::embedCacheDuration
, which controls the cache duration for successful video embed responses, and (defaults tocraft\config\GeneralConfig::cacheDuration
) - Added
Settings::embedCacheDurationOnError
, which controls the cache duration for unsuccessful video embed responses (default 5 minutes) - Added support for a
cache_duration
parameter for theToolmateVariable::getVideoEmbed()
andgetVideoEmbed()
Twig function, which can be used to override the cache duration in Toolmate's settings - Added a boilerplate
config.php
to the plugin repo
Improvements
- ToolMate now caches unsuccessful video embed responses separate from successful video embed responses
Settings::publicRoot
now defaults to the@webroot
alias, and falls back on$_SERVER['DOCUMENT_ROOT']
Fixed
- Fixes an issue where ToolMate would cache video embed request responses for much longer than intended
Changed
- Toolmate now does logging to its own log file
storage/logs/toolmate.log
ToolMate v. 1.0.3
1.0.3 - 2021-05-19
Improved
- YouTube embeds will always set
rel=0
to prevent YouTube from pulling in "related" videos from other channels when the video ends
ToolMate v. 1.0.1
1.0.1 - 2020-12-14
Fixed
- Fixed issue with empty maxwidth oembed param