v3.6.21
Headers middleware: support Content-Security-Policy-Report-Only
Merge current v2.11 into v3.0
Merge current v2.11 into v3.6
Merge branch v2.11 into v3.6
Fix deny encoded characters
Fix HasSecureHeadersDefined returning false when stsSeconds is 0
fix: DeepCopy of PluginConf
chore: update linter