Download the PHP package limesoda-com/ls-security-headers without Composer

On this page you can find all versions of the php package limesoda-com/ls-security-headers. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Informations about the package ls-security-headers

TYPO3 13

TYPO3 Extension ls_security_headers

This extension offers configurable security headers for the frontend. You can easily create and manage them in a database record of your root page in the TYPO3 backend.
This comes in handy if for example resources are regularly added/changed, and you need to update the content security policy (CSP) accordingly.
The extension also offers the generation of CSP nonces.

Setup

  1. Install the extension by using composer
  2. Import the provided site set in your site config or set it as dependency in the site set of your site package(s)
  3. Create a "Security Headers" record on the root page and configure the desired headers
  4. Validate your configuration with the scanners of HTTP Observatory, securityheaders.com and/or many others.

Important Notes

Features

Nonce support

This extension includes a TypoScript helper function for generating CSP nonces.
All the nonces generated by the function during the request will automatically be added to the Content-Security-Policy header at the end of the request.
Basic usage:

The policy argument defines the policy the nonce should be added to (style for style-src, script for script-src, ...). The length argument defines the length of the nonce in bytes.

Furthermore, it's possible to get the nonce output as attribute with the flag asAttribute = '1'. A possible use case is the replacement feature of TypoScript:

Additionally, you can write your own library for the cObject-ViewHelper:

CSP Reporting

Local Reporting

The extension provides local CSP reporting that can be enabled in the extension settings. The reports are stored in
the database and can be accessed in the TYPO3 backend module "Security Headers". Additionally, a dashboard widget is
available for a quick overview.

External Reporting

The extension supports external reporting of Content Security Policy (CSP) violations. To configure this, open the
"Content Security Policy (CSP)" tab in the security headers record and scroll to the "External reporting" fieldset
at the bottom. There, you can enable reporting and define the endpoint name and URL to which CSP violation reports
should be sent. If external reporting is enabled, local reporting is automatically disabled.

Ressources

All versions of ls-security-headers with dependencies

PHP Build Version
Package Version
Requires typo3/cms-core Version ^13.4
php Version >=8.2 <=8.3.99
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package limesoda-com/ls-security-headers contains the following files

Loading the files please wait ....