bepsvpt/secure-headers

Add security related headers to HTTP response. The package includes Service Providers for easy Laravel integration.

7.4.0 2023-02-06 13:24 UTC

Requires

• php: ^7.0 || ^8.0

Requires (Dev)

• ext-json: *
• ext-xdebug: *
• ergebnis/composer-normalize: ~2.29
• laravel/pint: ~1.4
• orchestra/testbench: ~3.1 || ~4.18 || ~5.20 || ~6.25 || ~7.19 || ~8.0
• phpstan/phpstan: ~1.9
• phpunit/phpunit: ~5.7 || ~6.5 || ~7.5 || ~8.5 || ~9.5 || ~10.0

MIT

• bepsvpt

• https
• header
• laravel
• csp
• content-security-policy
• hsts
• except-ct
• feature-policy
• clear-site-data
• referrer-policy

README

Add security related headers to HTTP response. The package includes Service Providers for easy Laravel integration.

• Version
• Installation
• Usage（non laravel project）
• Document and Notice
• Changelog
• Upgrade
• License

Version

7.4.0

Supported Laravel Version

5.1 ~ 10.x

Installation

Non Laravel Project

Install using composer

composer require bepsvpt/secure-headers

Copy config file to your project directory

cp vendor/bepsvpt/secure-headers/config/secure-headers.php path/to/your/project/directory

Set up config file

Done!

Laravel Project

Install using composer

composer require bepsvpt/secure-headers

Add service provider in config/app.php ( laravel version < 5.5 )

Bepsvpt\SecureHeaders\SecureHeadersServiceProvider::class,

Publish config file

php artisan vendor:publish --provider="Bepsvpt\SecureHeaders\SecureHeadersServiceProvider"

Add global middleware in app/Http/Kernel.php

\Bepsvpt\SecureHeaders\SecureHeadersMiddleware::class,

Set up config file config/secure-headers.php

Done!

Lumen Project

Install using composer

composer require bepsvpt/secure-headers

Add service provider in bootstrap/app.php

$app->register(Bepsvpt\SecureHeaders\SecureHeadersServiceProvider::class);

Copy config file to project directory

mkdir config
cp vendor/bepsvpt/secure-headers/config/secure-headers.php config/secure-headers.php

Add global middleware in bootstrap/app.php

$app->middleware([
   \Bepsvpt\SecureHeaders\SecureHeadersMiddleware::class,
]);

Set up config file config/secure-headers.php

Done!

Usage(Non Laravel Project)

Do not forget to import namespace.

<?php

use \Bepsvpt\SecureHeaders\SecureHeaders;

Instance

<?php

// instantiate the class by fromFile static method
$secureHeaders = SecureHeaders::fromFile('/path/to/secure-headers.php');

// or instantiate the class directly
$config = require '/path/to/secure-headers.php';

$config['key'] = 'value'; // modify config value if needed

$secureHeaders = new SecureHeaders($config);

Send

// Get headers
$secureHeaders->headers();

// Send headers to HTTP response
$secureHeaders->send();

Document and Notice

Please see DOCS for details.

Changelog

Please see CHANGELOG for details.

Upgrade

Please see UPGRADE for details.

License

Secure Headers is licensed under The MIT License (MIT).