v1.6.1

• Fixes issue with multiple blacklist/whitelist options
• Typo in README

v1.6.0

Adds in whitelist and blacklist support for csrf

v1.5.2

Bugfix: Add style/script directive if nonce is true and only default-src set

v1.5.1

Bugfix: style-src nonce updates properly, speed improvement on match

v1.5.0

Support for nonce for either style-src, script-src, or both
Lower case headers for improved performance
Support for referrer-policy
Allow CSRF cookie options to be set
Bugfix: return to suppress promise warning