bepsvpt/secure-headers

Add security related headers to HTTP response. The package includes Service Providers for easy Laravel integration.

9.0.0 2025-01-18 07:18 UTC

Requires

• php: ^7.1 || ^8.0
• ext-json: *

Requires (Dev)

• ext-xdebug: *
• ergebnis/composer-normalize: ^2.42
• laravel/pint: ^1.14
• orchestra/testbench: ^3.1 || ^4.18 || ^5.20 || ^6.43 || ^7.41 || ^8.22 || ^9.0
• phpstan/phpstan: ^1.10
• phpunit/phpunit: ^5.7 || ^6.5 || ^7.5 || ^8.5 || ^9.6 || ^10.5

MIT

• bepsvpt

• https
• header
• laravel
• csp
• content-security-policy
• hsts
• except-ct
• feature-policy
• clear-site-data
• referrer-policy
• permissions-policy

README

Add security related headers to HTTP response. The package includes Service Providers for easy Laravel integration.

• Version
• Installation
• Usage（non laravel project）
• Document and Notice
• Changelog
• Upgrade
• License

Version

9.0.0

Supported Laravel Version

5.1 ~ 12.x

Installation

Non Laravel Project

Install using composer

composer require bepsvpt/secure-headers

Copy config file to your project directory

cp vendor/bepsvpt/secure-headers/config/secure-headers.php path/to/your/project/directory

Set up config file

Done!

Laravel Project

Install using composer

composer require bepsvpt/secure-headers

Add service provider in config/app.php ( laravel version < 5.5 )

Bepsvpt\SecureHeaders\SecureHeadersServiceProvider::class,

Publish config file

php artisan vendor:publish --provider="Bepsvpt\SecureHeaders\SecureHeadersServiceProvider"

Add global middleware in app/Http/Kernel.php ( laravel version < 12 )

\Bepsvpt\SecureHeaders\SecureHeadersMiddleware::class,

Add global middleware in bootstrap/app.php ( laravel version >= 12 )

->withMiddleware(function (Middleware $middleware): void {
    $middleware->append(\Bepsvpt\SecureHeaders\SecureHeadersMiddleware::class);
})

Set up config file config/secure-headers.php

Done!

Lumen Project

Install using composer

composer require bepsvpt/secure-headers

Add service provider in bootstrap/app.php

$app->register(Bepsvpt\SecureHeaders\SecureHeadersServiceProvider::class);

Copy config file to project directory

mkdir config
cp vendor/bepsvpt/secure-headers/config/secure-headers.php config/secure-headers.php

Add global middleware in bootstrap/app.php

$app->middleware([
   \Bepsvpt\SecureHeaders\SecureHeadersMiddleware::class,
]);

Set up config file config/secure-headers.php

Done!

Usage(Non Laravel Project)

Do not forget to import namespace.

<?php

use \Bepsvpt\SecureHeaders\SecureHeaders;

Instance

<?php

// instantiate the class by fromFile static method
$secureHeaders = SecureHeaders::fromFile('/path/to/secure-headers.php');

// or instantiate the class directly
$config = require '/path/to/secure-headers.php';

$config['key'] = 'value'; // modify config value if needed

$secureHeaders = new SecureHeaders($config);

Send

// Get headers
$secureHeaders->headers();

// Send headers to HTTP response
$secureHeaders->send();

Document and Notice

Please see DOCS for details.

Changelog

Please see CHANGELOG for details.

Upgrade

Please see UPGRADE for details.

License

Secure Headers is licensed under The MIT License (MIT).