therobfonz/laravel-security-headers

Adds security headers to Laravel responses.

Maintainers

Details

github.com/therobfonz/laravel-security-headers

Source

Issues

Installs: 4 172

Dependents: 0

Suggesters: 0

Security: 0

Stars: 56

Watchers: 1

Forks: 5

Open Issues: 1

3.1.0 2019-10-11 00:00 UTC

Requires

Requires (Dev)

mit 4ed4597d08d092328177fb25c4d38adce5675bf6

  • Rob Fonseca <robfonseca.woop@gmail.com>

laravelsecurity headers

This package is auto-updated.

Last update: 2024-11-20 16:13:17 UTC

README

This is a Laravel service provider for adding security header responses to your application.

Installation

The SecurityHeaders Service Provider can be installed via Composer by requiring the therobfonz/laravel-security-headers package in your project's composer.json.

{
    "require": {
        "therobfonz/laravel-security-headers": "^3.0"
    }
}

Packages are auto-discovered in Laravel 5.6+. Service Providers and Facades are defined in composer.json.

Config File

Publish the confirguration file using Artisan.

php artisan vendor:publish --provider="TheRobFonz\SecurityHeaders\Providers\SecurityHeadersServiceProvider"

Update your settings in the generated config/security.php configuration file.

Configuration

Add the middleware to the 'web' middleware group in App\Http\Kernel.php

protected $middlewareGroups = [
    'web' => [
        //...
        \TheRobFonz\SecurityHeaders\Middleware\RespondWithSecurityHeaders::class,

Nonces

Every inline script tag needs to include the @nonce blade directive in the opening tag.

<script @nonce>

Links