slavlee/waf

Web Application Firewall for TYPO3 CMS.

dev-main 2024-03-29 19:10 UTC

Requires

• php: ^8.1
• typo3/cms-core: ^12.4

Requires (Dev)

• friendsofphp/php-cs-fixer: ^3.52.1
• phpunit/phpunit: ^10
• typo3/cms-composer-installers: ^3.1.3 || 4.0.0-RC1 || ^5.0
• typo3/cms-install: ^11.5.24 || ^12.4.2
• typo3/coding-standards: ^0.7.1
• typo3/testing-framework: ^8

GPL-2.0-or-later

• Kevin Chileong Lee

• security
• firewall
• typo3
• waf

README

This is a native TYPO3 extension to increase security of TYPO3 websites. Currently the main focus is to block suspicious HTTP requests in the frontend.

2 Usage

2.1 Installation

Installation as extension from TYPO3 Extension Repository (TER)

Download and install the extension with the extension manager module.

2.2 Installation with composer

composer req slavlee/waf

2.2 Configuration

After installing the extenions you need to do the following steps:

1. Admin Tools -> Maintenance -> Flush Injection Cache
2. Admin Tools -> Settings -> Configure extensions -> waf. Do your changes and press save.

3 Documentations

Testing Documentation

4 Changelog

The changelogs can be found inside the CHANGES.md file.

5 Final words

I give my best to make TYPO3 websites as secure as possible. Unfortunately I can't promise or guarantee that your site will be 100% secure. You are still responsible for your website. Please be aware that this WAF my also block valid requests, there is on option to exlude arguments or urls at the moment.