# Directus v9.4.2 — Release & Upgrade Intelligence
- **Product:** Directus (https://directus.io)
- **Version:** v9.4.2
- **Released:** Dec 31, 2021
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/directus/updates/v9.4.2/

## Executive Summary (TL;DR)
Directus v9.4.2. Source highlight: For security reasons, we've enabled the `Content-Security-Policy` header by default. This won't change the normal operating behavior of the API, but be aware if you were doing some trickery before that might be affected by this header.

## New Features
- #10778 Add warning when DB_CHARSET isn't explicitly configured (@rijkvanzanten)
- :warning: #10776 Add Content-Security-Policy header by default (@rijkvanzanten)
- #10765 Add ability to configure IP extraction (@rijkvanzanten)
- #10761 Add link to Cleavr deployment guide (@armgitaar)

## Improvements
- #10773 Don't force commandTimeout in redis based caches (@rijkvanzanten)
- #10762 Don't show badge when no revisions (@azrikahar)
- #10760 style tweaks (@benhaynes)
- #9224 Enable alpha channel in color selector (@adanielyan)