Download the PHP package duality-studio/lara-security without Composer
On this page you can find all versions of the php package duality-studio/lara-security. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download duality-studio/lara-security
More information about duality-studio/lara-security
Files in duality-studio/lara-security
Package lara-security
Short Description A straight implementation of security headers for Laravel
License MIT
Informations about the package lara-security
Lara Security
Simple way to add various security headers to a Laravel application.
This project is WIP and could with cleanup, better implementation and some docs.
Docs
TODO, the bellow is 5 minute notes.
Install
In your app/Http/Kernel.php
add the following to the $middleware
array or as you see fit.
In your config/lara-security.php
you can configure the headers you want to use, all are enabled by default. In the CSP header is broken into directives.
Nonces
If you intend to use a nonce in your you will need to add a script or style directive for your static files.
Usage with Vite
Set use_vite
to true in the config file. This will automatically add the nonce
to the script and style tags in the vite manifest.
Usage of the package is problematic when using the vite dev server, so you can disable the package when in dev mode by adding the following to your .env
Usage with Inertia.JS
If you are using Inertia.JS you will need to add the following to your app.blade.php
file.
All versions of lara-security with dependencies
illuminate/http Version ^9.0|^10.0|^11.0
illuminate/support Version ^9.0|^10.0|^11.0