hdvinnie/laravel-security-headers

Adds security related headers to HTTP response.

v3.0.0 2024-03-13 15:44 UTC

Requires

• php: ^7.4|^8.0
• illuminate/support: ^6|^7|^8|^9|^10|^11

Requires (Dev)

• ext-json: *
• ext-xdebug: *
• orchestra/testbench: ^3.1|^4.0|^5.0|^6.0|^7.0|^8.0

Suggests

• friendsofphp/php-cs-fixer: Coding style fixer
• phpstan/phpstan: Static analysis tool
• phpunit/phpunit: PHP unit testing framework

MIT

• HDVinnie

• https
• header
• laravel
• csp
• content-security-policy
• hsts
• except-ct
• feature-policy
• clear-site-data
• referrer-policy
• HDVinnie

README

Security related headers to HTTP responses in Laravel

Installation

Install using composer

composer require hdvinnie/laravel-security-headers

Add service provider in config/app.php ( laravel version < 5.5 )

HDVinnie\SecureHeaders\SecureHeadersServiceProvider::class,

Publish config file

php artisan vendor:publish --provider="HDVinnie\SecureHeaders\SecureHeadersServiceProvider"

Add global middleware in app/Http/Kernel.php

\HDVinnie\SecureHeaders\SecureHeadersMiddleware::class,

Set up config file config/secure-headers.php

Done!