v1.7.0 — Path policy inheritance, OWASP API + NSwag presets
Security (resolves #3):
- New \PathPolicy(...)\ extension method: path policies now inherit the global configuration and only override explicitly set values — prevents accidental security header downgrades (e.g. weaker HSTS on /api)
- \ApplyPreset(...)\ and \Clone()\ are now public — official inheritance mechanism for path policies and custom presets
New presets:
- \SecurePresets.OwaspApi()\ / \AddNetSecureHeadersOwaspApiPreset(...)\ — OWASP API Security Top 10 aligned response-header hardening for API endpoints
- \SecurePresets.NSwag()\ / \AddNetSecureHeadersNSwagPreset(...)\ — NSwag UI (Rico Sutter) preset with nonce-based CSP and unpkg CDN assets, no unsafe-inline
- \SecurePresets.OwaspApiPath()\ — path policy helper for OWASP API preset
Compatibility: 100% backward compatible. All new APIs are additive and opt-in.
See CHANGELOG.md and docs/ for full details.