growats/ok-nic-owasp-security

A Laravel package for OWASP security best practices

v1.0.0 2025-02-20 08:02 UTC

MIT

• Shyamendra Kushwaha

README

Introduction

ok-nic-owasp-security is a Laravel package that implements OWASP security best practices, including:

• Secure HTTP headers
• Cross-Site Scripting (XSS) protection
• SQL Injection mitigation
• Rate limiting
• Cross-Origin Resource Sharing (CORS) protection

Installation

Install the package using Composer:

composer require Growats/ok-nic-owasp-security



##Publish Configuration
 
php artisan vendor:publish --tag=owasp-security 

This will create the configuration file at:

 
config/owasp-security.php

## Register Middleware
Add the middleware to app/Http/Kernel.php under $middleware:

protected $middleware = [
    \Growats\OkNicOwaspSecurity\Middleware\SecurityHeaders::class,
    \Growats\OkNicOwaspSecurity\Middleware\XssSanitization::class,
    \Growats\OkNicOwaspSecurity\Middleware\RateLimiting::class,
    \Growats\OkNicOwaspSecurity\Middleware\SqlInjectionProtection::class,
    \Growats\OkNicOwaspSecurity\Middleware\CorsProtection::class,
];


Middleware Explanation | Middleware	Description
SecurityHeaders	       | Adds security headers (CSP, HSTS, XSS Protection)
XssSanitization	       | Strips malicious scripts from input
RateLimiting	       | Limits excessive requests to prevent DoS attacks
SqlInjectionProtection | Blocks common SQL injection patterns
CorsProtection	       | Restricts cross-origin requests