alkhwlani/xss-middleware

A Laravel 5.5+ Middleware to filter user inputs from XSS and iframes and other embed elements.

4.0.0 2023-03-25 12:44 UTC

Requires

• graham-campbell/security: ^11.0

Requires (Dev)

• illuminate/support: ^10.0
• laravel/legacy-factories: ^1.3
• mockery/mockery: ^1.4.4
• orchestra/testbench: ^8.0
• phpunit/phpunit: ^9.5.10

MIT

• Salah Alkhwlani

• framework
• security
• middleware
• laravel
• xss
• Laravel Security
• Laravel-Security
• filter input

README

A Laravel middleware to cleaning all inputs/data of request from XSS and embed elements, its used Security Core package by Graham Campbell under the hook.

Support version

Install

composer require alkhwlani/xss-middleware

Usage

That's it! by default package automatic register a global middleware to cleaning all string inputs for all requests.

if you are not using automatic package discovery, then add the service provider in config/app.php:

\Alkhwlani\XssMiddleware\ServiceProvider::class,

Optional

if you want customizes configuration you can publish the configuration

$ php artisan vendor:publish --provider="\Alkhwlani\XssMiddleware\ServiceProvider"

Then check the content of the published config file config/xss-middleware.php.

Testing

Run the tests with:

vendor/bin/phpunit

Contributing

Please see CONTRIBUTING for details.

Security

If you discover any security-related issues, please email [e-mail] instead of using the issue tracker.

Credits

• Salah Alkhwlani
• Graham Campbell
• All Contributors

License

The MIT License (MIT). Please see License File for more information.