# Changelog All notable changes to `laravel-csp` will be documented in this file ## 3.13.0 - 2025-05-23 ### What's Changed * Adds Hireroad/Vacancy Filler Recruitment Preset by @atomicjam in https://github.com/spatie/laravel-csp/pull/176 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.12.0...3.13.0 ## 3.12.0 - 2025-05-22 ### What's Changed * Add `Policy@setReportUri()` method by @hivokas in https://github.com/spatie/laravel-csp/pull/175 ### New Contributors * @hivokas made their first contribution in https://github.com/spatie/laravel-csp/pull/175 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.11.1...3.12.0 ## 3.11.1 - 2025-05-13 ### What's Changed * Use correct format for directives by @adamjgriffith in https://github.com/spatie/laravel-csp/pull/167 * HotJar Updates for FONT/STYLE/IMG Directives by @atomicjam in https://github.com/spatie/laravel-csp/pull/170 * Fathom Preset Missing Connect by @bashgeek in https://github.com/spatie/laravel-csp/pull/171 * MetaPixel Preset is missing connect by @bashgeek in https://github.com/spatie/laravel-csp/pull/174 * GoogleTagManager Preset Missing URL by @bashgeek in https://github.com/spatie/laravel-csp/pull/173 * GoogleAnalytics Preset Missing Some URL's by @bashgeek in https://github.com/spatie/laravel-csp/pull/172 ### New Contributors * @bashgeek made their first contribution in https://github.com/spatie/laravel-csp/pull/171 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.11.0...3.11.1 ## 3.11.0 - 2025-04-28 ### What's Changed * Allow tag manager noscript fallback by @adamjgriffith in https://github.com/spatie/laravel-csp/pull/166 ### New Contributors * @adamjgriffith made their first contribution in https://github.com/spatie/laravel-csp/pull/166 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.10.0...3.11.0 ## 3.10.0 - 2025-04-28 ### What's Changed * Add configuration for Vite hot reloading by @ziadoz in https://github.com/spatie/laravel-csp/pull/165 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.9.0...3.10.0 ## 3.9.0 - 2025-04-25 ### What's Changed * Add HotJar preset by @ziadoz in https://github.com/spatie/laravel-csp/pull/163 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.8.2...3.9.0 ## 3.8.2 - 2025-04-25 ### What's Changed * Update README.md by @nessimabadi in https://github.com/spatie/laravel-csp/pull/162 * Ensure correct report_uri is applied for report-only CSP policies by @andrextor in https://github.com/spatie/laravel-csp/pull/164 ### New Contributors * @nessimabadi made their first contribution in https://github.com/spatie/laravel-csp/pull/162 * @andrextor made their first contribution in https://github.com/spatie/laravel-csp/pull/164 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.8.1...3.8.2 ## 3.8.1 - 2025-04-10 ### What's Changed * Captcha Services Presets by @atomicjam in https://github.com/spatie/laravel-csp/pull/160 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.8.0...3.8.1 ## 3.8.0 - 2025-04-08 ### What's Changed * Preset for Meta Pixels by @atomicjam in https://github.com/spatie/laravel-csp/pull/159 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.7.0...3.8.0 ## 3.7.0 - 2025-04-08 ### What's Changed * Add Vimeo preset by @rbibby in https://github.com/spatie/laravel-csp/pull/158 ### New Contributors * @rbibby made their first contribution in https://github.com/spatie/laravel-csp/pull/158 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.6.0...3.7.0 ## 3.6.0 - 2025-04-04 ### What's Changed * 3 Presets (Stripe, Plausible, TicketTailor) by @atomicjam in https://github.com/spatie/laravel-csp/pull/156 * Skip CSP middleware when Vite is hot reloading by @ziadoz in https://github.com/spatie/laravel-csp/pull/154 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.5.0...3.6.0 ## 3.5.0 - 2025-03-28 ### What's Changed * docs: remove return from v3 upgrade guide by @audunru in https://github.com/spatie/laravel-csp/pull/153 * Add Microsoft Clarity Preset by @atomicjam in https://github.com/spatie/laravel-csp/pull/155 ### New Contributors * @audunru made their first contribution in https://github.com/spatie/laravel-csp/pull/153 * @atomicjam made their first contribution in https://github.com/spatie/laravel-csp/pull/155 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.4.0...3.5.0 ## 3.4.0 - 2025-03-21 ### What's Changed * Add Cloudflare Web Analytics preset by @ohiader in https://github.com/spatie/laravel-csp/pull/152 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.3.0...3.4.0 ## 3.3.0 - 2025-03-20 ### What's Changed * Google TLDs CSP preset by @christianschoenmakers in https://github.com/spatie/laravel-csp/pull/148 * Posthog CSP preset by @christianschoenmakers in https://github.com/spatie/laravel-csp/pull/149 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.2.0...3.3.0 ## 3.2.0 - 2025-03-20 ### What's Changed * Intercom preset by @christianschoenmakers in https://github.com/spatie/laravel-csp/pull/147 * Bunny Fonts preset by @ndeblauw in https://github.com/spatie/laravel-csp/pull/150 * Skip CSP middleware when Laravel is rendering an exception by @ziadoz in https://github.com/spatie/laravel-csp/pull/151 ### New Contributors * @christianschoenmakers made their first contribution in https://github.com/spatie/laravel-csp/pull/147 * @ndeblauw made their first contribution in https://github.com/spatie/laravel-csp/pull/150 * @ziadoz made their first contribution in https://github.com/spatie/laravel-csp/pull/151 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.1.0...3.2.0 ## 3.1.0 - 2025-03-18 ### What's Changed * Update migration guide to use `$policy` by @patrickomeara in https://github.com/spatie/laravel-csp/pull/144 * Update README.md by @jackbayliss in https://github.com/spatie/laravel-csp/pull/145 * Ensure null values are removed by @jackbayliss in https://github.com/spatie/laravel-csp/pull/146 * Cloudflare Turnstile preset by @ohiader in https://github.com/spatie/laravel-csp/pull/143 ### New Contributors * @patrickomeara made their first contribution in https://github.com/spatie/laravel-csp/pull/144 * @jackbayliss made their first contribution in https://github.com/spatie/laravel-csp/pull/145 * @ohiader made their first contribution in https://github.com/spatie/laravel-csp/pull/143 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/3.0.0...3.1.0 ## 2.10.3 - 2025-02-14 ### What's Changed * Add support for Laravel 12 by @mfn in https://github.com/spatie/laravel-csp/pull/136 ### New Contributors * @mfn made their first contribution in https://github.com/spatie/laravel-csp/pull/136 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.10.2...2.10.3 ## 2.10.2 - 2024-12-30 ### What's Changed * Fix getting Blade compiler by @CicerBro in https://github.com/spatie/laravel-csp/pull/134 * Add ability to skip nonce generation by @juliangums in https://github.com/spatie/laravel-csp/pull/132 ### New Contributors * @CicerBro made their first contribution in https://github.com/spatie/laravel-csp/pull/134 * @juliangums made their first contribution in https://github.com/spatie/laravel-csp/pull/132 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.10.1...2.10.2 ## 2.10.1 - 2024-09-20 ### What's Changed * Update README.md by @federico-boncaldo in https://github.com/spatie/laravel-csp/pull/127 * chore: update Git Attributes by @owenvoke in https://github.com/spatie/laravel-csp/pull/129 * Mark arguments as nullable in AddCspHeaders by @jnoordsij in https://github.com/spatie/laravel-csp/pull/128 ### New Contributors * @federico-boncaldo made their first contribution in https://github.com/spatie/laravel-csp/pull/127 * @owenvoke made their first contribution in https://github.com/spatie/laravel-csp/pull/129 * @jnoordsij made their first contribution in https://github.com/spatie/laravel-csp/pull/128 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.10.0...2.10.1 ## 2.10.0 - 2024-06-04 ### What's Changed * feat: added missing 'wasm-unsafe-eval' keyword by @fxnm in https://github.com/spatie/laravel-csp/pull/125 ### New Contributors * @fxnm made their first contribution in https://github.com/spatie/laravel-csp/pull/125 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.9.0...2.10.0 ## 2.9.0 - 2024-02-27 ### What's Changed * Fix incorrect namespaces in README.md by @dnwjn in https://github.com/spatie/laravel-csp/pull/121 * chore: prepare for laravel 11 by @joostdebruijn in https://github.com/spatie/laravel-csp/pull/124 ### New Contributors * @dnwjn made their first contribution in https://github.com/spatie/laravel-csp/pull/121 * @joostdebruijn made their first contribution in https://github.com/spatie/laravel-csp/pull/124 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.8.4...2.9.0 ## 2.8.4 - 2024-01-05 ### What's Changed * Removed expired link from readme file by @DevYunus in https://github.com/spatie/laravel-csp/pull/118 * Add require-trusted-types-for directive by @nicolasbeauvais in https://github.com/spatie/laravel-csp/pull/120 ### New Contributors * @DevYunus made their first contribution in https://github.com/spatie/laravel-csp/pull/118 * @nicolasbeauvais made their first contribution in https://github.com/spatie/laravel-csp/pull/120 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.8.3...2.8.4 ## 2.8.3 - 2023-02-13 ### What's Changed - Add PHP 8.2 Support by @patinthehat in https://github.com/spatie/laravel-csp/pull/109 - Improve grammar and formatting of readme by @rubenvanerk in https://github.com/spatie/laravel-csp/pull/112 - fix github test badge by @askdkc in https://github.com/spatie/laravel-csp/pull/113 ### New Contributors - @patinthehat made their first contribution in https://github.com/spatie/laravel-csp/pull/109 - @rubenvanerk made their first contribution in https://github.com/spatie/laravel-csp/pull/112 - @askdkc made their first contribution in https://github.com/spatie/laravel-csp/pull/113 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.8.2...2.8.3 ## 2.8.2 - 2022-09-13 ### What's Changed - Add wss: (secure websocket) scheme support by @bitwise-operators in https://github.com/spatie/laravel-csp/pull/105 ### New Contributors - @bitwise-operators made their first contribution in https://github.com/spatie/laravel-csp/pull/105 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.8.1...2.8.2 ## 2.8.1 - 2022-09-01 ### What's Changed - Lazily register blade directives by @axlon in https://github.com/spatie/laravel-csp/pull/104 ### New Contributors - @axlon made their first contribution in https://github.com/spatie/laravel-csp/pull/104 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.8.0...2.8.1 ## 2.8.0 - 2022-08-25 ### What's Changed - Fixing readme issues by @lukeclifton in https://github.com/spatie/laravel-csp/pull/88 - Update README.md by @melicerte in https://github.com/spatie/laravel-csp/pull/90 - Update README.md by @melicerte in https://github.com/spatie/laravel-csp/pull/91 - Rewrite tests to use Pest by @Magiczne in https://github.com/spatie/laravel-csp/pull/92 - Wrong method name for Vite nonce by @rcerljenko in https://github.com/spatie/laravel-csp/pull/102 - Adds a new `@cspMetaTag` blade directive by @lukeraymonddowning in https://github.com/spatie/laravel-csp/pull/103 ### New Contributors - @lukeclifton made their first contribution in https://github.com/spatie/laravel-csp/pull/88 - @melicerte made their first contribution in https://github.com/spatie/laravel-csp/pull/90 - @Magiczne made their first contribution in https://github.com/spatie/laravel-csp/pull/92 - @rcerljenko made their first contribution in https://github.com/spatie/laravel-csp/pull/102 - @lukeraymonddowning made their first contribution in https://github.com/spatie/laravel-csp/pull/103 **Full Changelog**: https://github.com/spatie/laravel-csp/compare/2.7.0...2.8.0 ## 2.7.0 - 2022-01-13 - support Laravel 9 ## 2.6.4 - 2020-12-01 - add support for PHP 8 ## 2.6.3 - 2020-10-21 - add prefetch-src directive (#77) ## 2.6.2 - 2020-10-01 - add unsafe-hashes keyword ## 2.6.1 - 2020-09-09 - Add support for Laravel 8 ## 2.6.0 - 2020-07-17 - added "report-to" directive (#71) ## 2.5.1 - 2020-03-06 - add websockets scheme support (#65) ## 2.5.0 - 2020-03-03 - Add Laravel 7 support - Add None override ## 2.4.0 - 2019-09-04 - Add Laravel 6.0 support ## 2.3.0 - 2019-05-23 - add webrtc-src directive ## 2.2.0 - 2019-02-27 - drop support for Laravel 5.7 and below - drop support for PHP 7.1 and below ## 2.1.3 - 2019-02-27 - add support for Laravel 5.8 ## 2.1.2 - 2019-02-04 - replace str_random and starts_with helpers to its class based counterpart ## 2.1.1 - 2019-02-01 - use Arr:: and Str:: functions ## 2.1.0 - 2018-11-12 - add new script and style directives ## 2.0.0 - 2018-11-05 - moved most values in `Value` to `Keyword` - remove deprecated `cspValue` function ## 1.4.0 - 2018-10-30 - add possibility to change value to no value ## 1.3.3 - 2018-09-04 - support for Laravel 5.7 ## 1.3.2 - 2018-08-02 - fix compatibility with Lumen ## 1.3.1 - 2018-08-02 - make compatible with Lumen ## 1.3.0 - 2018-07-27 - add value constant for `data:` ## 1.2.2 - 2018-05-05 - fix blade directive ## 1.2.1 - 2018-04-30 - improvements around quoting values ## 1.2.0 - 2018-04-13 - add `csp_nonce` function ## 1.1.0 - 2018-04-13 - add value constants ## 1.0.5 - 2018-03-08 - add support for PHP 7.0 ## 1.0.4 - 2018-03-01 - fix blade directive ## 1.0.3 - 2018-02-21 - improve base profile ## 1.0.2 - 2018-02-20 - fix directory name ## 1.0.1 - 2018-02-20 - fix naming of classes ## 1.0.0 - 2018-02-20 **BROKEN VERSION, DO NOT USE** - initial release