Version 1.19.1

• Added “clientHints” directive to “Clear-Site-Data” header
• Added “credentialless” directive to “Cross-Origin-Embedder-Policy” header

Version 1.19.0

• Fixed: SSRF vulnerability by an Admin user
• Fixed: XSS vulnerability by an Admin user

Version 1.18.11

Patch for RCE by Admin user

Version 1.18.4

• Added "X-Robots-Tag" header
• Added "interest-cohort", "layout-animations", "legacy-image-formats", "oversized-images", and "wake-lock" directive to "Permissions-Policy" header
• Added "cross-origin" value to "Cross-Origin-Resource-Policy" header
• Added "navigate-to" and "prefetch-src" directives to "Content-Security-Policy" header

Version 1.18.1

• Added “allow-downloads” and “allow-top-navigation-by-user-activation” to “sandbox” directive, part of CSP

Version 1.17.0

• Added "Cross-Origin-Embedder-Policy" header
• Added "Cross-Origin-Opener-Policy" header

Version 1.16.1

• Fix resource versioning

Version 1.16.0

• Added the "NEL" header
• Fixed the "Report-To" header

Various improvements

• Support of Brotli compression
• Support of "SameSite" directive to cookies
• Import/export function bugfixed
• Code refactoring

Remove direct calls to cURL

• Direct calls to cURL was removed