phpolar / csrf-protection
Provides request checking and response filtering to mitigate CSRF attacks
2.0.1
2023-03-02 04:40 UTC
Requires
- php: >=8.1
- ext-mbstring: *
- phpolar/http-codes: ^0.0.6
- psr/http-message: ^1.0
- psr/http-server-handler: ^1.0
- psr/http-server-middleware: ^1.0
Requires (Dev)
- ext-ast: ^1.1
- ext-openssl: *
- phan/phan: ^5.4
- php-coveralls/php-coveralls: ^2.5
- phpmd/phpmd: ^2.13
- phpstan/phpstan: ^1.9
- phpunit/phpunit: ^10.0
- squizlabs/php_codesniffer: ^3.7
Suggests
- laminas/laminas-diactoros: Provides a PSR-7 implementation
- monolog/monolog: Allows for logging forbidden requests
Provides
README
Csrf Protection
PSR-7 and PSR-15 based CSRF protection for HTTP requests
Table of Contents
Installation
composer require phpolar/csrf-protection
Usage
$csrfChecking = $this->container->get(CsrfRequestCheckMiddleware::class); $csrfFiltering = $this->container->get(CsrfResponseFilterMiddleware::class); $app->use($csrfChecking); $app->use($csrfFiltering); // ... $response = $csrfCheckMiddleware->process($request, $nextHandler); // ... $preparedResponse = $middleWare->process($request, $routingHandler);