codeinc/security-middleware

This package is abandoned and no longer maintained. No replacement package was suggested.

A collection of PSR-15 middleware to manage HTTP security

1.1.3 2018-10-08 14:37 UTC

Requires

• php: >=7.1
• codeinc/psr7-responses: ^2
• psr/http-message: ^1.0
• psr/http-server-handler: ^1.0
• psr/http-server-middleware: ^1.0

Requires (Dev)

• guzzlehttp/psr7: ^1.4
• phpunit/phpunit: ^7

Suggests

• codeinc/middleware-dispatcher: A PSR-15 middleware dispatcher
• codeinc/psr7-response-sender: A PSR-7 response sender
• codeinc/router: A PSR-7 & PSR-15 router

MIT

• Joan Fabrégat

README

This library provides a collection of PSR-15 middleware to manage HTTP security.

The collection includes

• ContentSecurityPolicyMiddleware Adds a Content-Security-Policy HTTP headers to the response
• ContentTypeOptionsMiddleware Adds a X-Content-Type-Options HTTP headers to the response
• ExpectCtMiddleware Adds a Expect-CT HTTP headers to the response
• FrameOptionsMiddleware Adds a X-Frame-Options HTTP headers to the response
• ReferrerPolicyMiddleware Adds a Referrer-Policy HTTP headers to the response
• StrictTransportSecurityMiddleware Adds a Strict-Transport-Security HTTP headers to the response
• XssProtectionMiddleware Adds a X-Xss-Protection HTTP headers to the response
• BlockUnsecureRequestsMiddleware Blocks unsecure (other than HTTPS) requests responses

Installation

This library is available through Packagist and can be installed using Composer:

composer require codeinc/security-middleware

💬 This library is extracted from the now deprecated codeinc/psr15-middlewares package.

License

The library is published under the MIT license (see LICENSE file).