README

Security header collection for the Quill PHP Framework. Protects your API by setting standard security-related HTTP headers.

Installation

composer require quillphp/helmet

use Quill\Helmet\Helmet;

$app->use(Helmet::new([
    'frame_options' => 'DENY',
    'xss_protection' => '1; mode=block',
]));

Option	Default	Description
`no_sniff`	`'nosniff'`	X-Content-Type-Options: nosniff.
`frame_options`	`'SAMEORIGIN'`	X-Frame-Options policy.
`xss_protection`	`'1; mode=block'`	X-XSS-Protection policy.
`referrer_policy`	`'no-referrer'`	Referrer-Policy.
`csp`	`"default-src 'self'..."`	Content-Security-Policy.

MIT