• #43 Add security middlewares: Secure, CORS, CSRF, CleanPath, StripSlashes

• #42 Add HEAD method support to Ping middleware

• #41 Make RealIP middleware compatible with Cloudflare/CDN setups

What's Changed

• Bump golang.org/x/crypto from 0.37.0 to 0.45.0 in the go_modules group across 1 directory by @dependabot[bot] in #36
• fix CI workflow caching by reordering checkout and setup-go steps by @paskal in #37
• fix Content-Type header being ignored when WriteHeader called before RenderJSON by @paskal in #39

Full Changelog: v1.20.4...v1.20.5

What's Changed

• Fixed broken link by @doichev-kostia in #26
• Update middleware.go by @RupeshHacker in #28
• fix golangci-lint reported errors, update configuration by @paskal in #30
• Add IPv4 link-local address to private ranges detector, update list by @paskal in #29
• Hashed auth by @umputun in #32

New Contributors

• @doichev-kostia made their first contribution in #26
• @RupeshHacker made their first contribution in #28

Full Changelog: v1.19.0...v1.20.0

• support ipv6 for realip and onlyfrom middleware
• explicit error handling for realip

Full Changelog: v1.18.0...v1.18.1

• switch to go 1.21
• omprove accuracy of real-ip detection for onlyfrom middleware
• allow real-ip to be local, if no public IP is present

Full Changelog: v1.17.0...v1.18.0

• extend basic auth with simplified version and keep authorized status in ctx

Full Changelog: v1.16.0...v1.17.0

What's Changed

• Health middleware by @umputun in #23
• Add the ability to set a custom max time range for benchmarks
• Add reject middleware

Full Changelog: v1.15.6...v1.16.0

What's Changed

• Benchmarks middleware by @umputun in #22

Full Changelog: v1.14.0...v1.15.0