Search by 
mibu / laravel-defaulto
dev-develop
2023-11-10 14:28 UTC
Requires
- illuminate/contracts: ^10.0
Requires (Dev)
- fakerphp/faker: ^1.21
- friendsofphp/php-cs-fixer: ^3.13
- orchestra/testbench: ^8.13
- phpstan/phpstan: ^1.9
- phpstan/phpstan-strict-rules: ^1.4
- phpunit/phpunit: ^9.5
This package is auto-updated.
Last update: 2024-11-10 16:39:32 UTC
README
This is WIP, please do not use in production.
About
A package that overrides the default Laravel configuration with secure defaults, plus some opinionated boilerplate (that can be disabled).
Features
- Secure config by default
- Increased bcrypt hashing cost
- Encrypted session data
- Expire cookies on browser close
- Prevent CSR cookies
- HTTPS only cookies
- ...
- Eloquent
- Req. morph map
- Strict mode
- Immutable dates
TODO
- Is there a way to enforce install of the Roave Security Advisories package as a dev dependency?
- Tests, tests, tests.
Documentation
//
Installation
//
Please do not blindly use this package in production without thoroughly testing the implementation.
Security
Please do not report security related issues publicly.