v3.7.2
Add routing configuration extension points
Headers middleware: support Content-Security-Policy-Report-Only
Merge current v2.11 into v3.0
Merge current v2.11 into v3.6
Merge branch v3.6 into v3.7
Fix deny encoded characters
Fix HasSecureHeadersDefined returning false when stsSeconds is 0
fix: DeepCopy of PluginConf
Prepare release v3.7.0-ea.1