Released version 3.0.1
- DI extensions: are using configuration Schema
- simplified code
- Session: do not regenerate session ID when is newly created
- Session: security options can not be bypassed
- Session: $started changed from static to object property
- Session: $started replaced with checking
session_status()
for better cooperation with the session started outside nette nette/forms#214 - RequestFactory: added workaround
[]
in REMOTE_ADDR #152 - Revert "HttpExtension: uses interfaces IRequest & IResponse instead of Request & Response (BC break) #90"
- SessionExtension: accepts 'cookieSamesite = true'
- Revert "Session: by default uses sameSite: Lax (BC break)"
- HttpExtension: removed option 'sameSiteProtection', cookie 'nette-samesite' is always set
- Session: validates configuration option names
- SessionPanel: uses Tracy\Helpers::
escapeHtml()
For the details you can have a look at the diff.