chore: clarify helmet changes in changelog

Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-08-29 13:34:45 +02:00
parent 60b85d8ade
commit 17b1c64ca4
1 changed files with 5 additions and 0 deletions
@@ -7,3 +7,8 @@
 ---

 Updated dependency `helmet` to `^6.0.0`.
+
+Please note that these policies are no longer applied by default:
+
+helmet.contentSecurityPolicy no longer sets block-all-mixed-content directive by default
+helmet.expectCt is no longer set by default. It can, however, be explicitly enabled. It will be removed in Helmet 7.