SafeWebCore v1.7.0

v1.7.0 — Path policy inheritance, OWASP API + NSwag presets

Security (resolves #3):

• New \PathPolicy(...)\ extension method: path policies now inherit the global configuration and only override explicitly set values — prevents accidental security header downgrades (e.g. weaker HSTS on /api)
• \ApplyPreset(...)\ and \Clone()\ are now public — official inheritance mechanism for path policies and custom presets

New presets:

• \SecurePresets.OwaspApi()\ / \AddNetSecureHeadersOwaspApiPreset(...)\ — OWASP API Security Top 10 aligned response-header hardening for API endpoints
• \SecurePresets.NSwag()\ / \AddNetSecureHeadersNSwagPreset(...)\ — NSwag UI (Rico Sutter) preset with nonce-based CSP and unpkg CDN assets, no unsafe-inline
• \SecurePresets.OwaspApiPath()\ — path policy helper for OWASP API preset

Compatibility: 100% backward compatible. All new APIs are additive and opt-in.

See CHANGELOG.md and docs/ for full details.

V1.6.0.0.0

Full Changelog: V1.3.0.0...V1.6.0.0.0

V1.3.0

Full Changelog: V1.2.0.0...V1.3.0.0

V1.2.0 nuget package production grade

Full Changelog: V1.1.0.0...V1.2.0.0
This source repo is the exact version of the fully tested V1.2.0 nuget package

V1.1.0

Full Changelog: V1.0.0.0...V1.1.0.0

Now using Xunit V3 , modernized code , favoring • stackalloc + Span — NonceService hot path

V1 Full CSP3 Partial CSP4 (Draft ahead)

This is the first nuget release of SharpWebCore note this idea , practices and code is used for years in the companies I work for .

Now it is easy for anyone to get a A+