Giraffe v8.2.0-alpha-001 released!

[NewsBot]

Giraffe v8.2.0-alpha-001 has been released.

Breaking changes

• Some security fixes for Giraffe - Credits @Thorium
  • New handlers added to improve security aspects, like safeRedirectTo, safeRedirectToExt, validateCsrfTokenExt and more. Those deal with:
    • URL validation in redirectTo to prevent cross-site scripting (XSS)
    • Cross-Site Request Forgery (CSRF) token validation helpers
  • XML serializer’s Deserialize<'T>(xml: string) method now uses a configuration to prevent XXE attacks.
  • redirectTo handler now marked as Obsolete.

Other updates

• Could we avoid allocation of UTF8 byte array? - Credits @Thorium

Link: Release 8.2.0-alpha-001 · giraffe-fsharp/Giraffe · GitHub