Download the PHP package nowo-tech/http-hardening-bundle without Composer
On this page you can find all versions of the php package nowo-tech/http-hardening-bundle. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Table of contents
Download nowo-tech/http-hardening-bundle
More information about nowo-tech/http-hardening-bundle
Files in nowo-tech/http-hardening-bundle
Download nowo-tech/http-hardening-bundle
More information about nowo-tech/http-hardening-bundle
Files in nowo-tech/http-hardening-bundle
Vendor nowo-tech
Package http-hardening-bundle
Short Description Symfony bundle for public HTTP hardening: security headers (nosniff, HSTS, Permissions-Policy, CORP), nonce-based Content-Security-Policy, public Cache-Control, www-to-apex redirect, safe internal redirects and optional anonymous session-cookie strip for CDN-friendly public GET pages.
License MIT
Homepage https://github.com/nowo-tech/HttpHardeningBundle
Package http-hardening-bundle
Short Description Symfony bundle for public HTTP hardening: security headers (nosniff, HSTS, Permissions-Policy, CORP), nonce-based Content-Security-Policy, public Cache-Control, www-to-apex redirect, safe internal redirects and optional anonymous session-cookie strip for CDN-friendly public GET pages.
License MIT
Homepage https://github.com/nowo-tech/HttpHardeningBundle
FAQ
After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.
Example:
Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories.
In this case some credentials are needed to access such packages.
Please use the auth.json textarea to insert credentials, if a package is coming from a private repository.
You can look here for more information.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?
Informations about the package http-hardening-bundle
HTTP Hardening Bundle
⭐ Found this useful? Install it from Packagist and star HttpHardeningBundle.
Symfony bundle for public HTTP hardening:
- Security headers —
X-Content-Type-Options,X-Frame-Options,Referrer-Policy,Permissions-Policy,Cross-Origin-Resource-Policy, optional HSTS - Anonymous session strip — remove the session cookie on configured public GET/HEAD routes so CDNs and checkers see cacheable HTML
- Content-Security-Policy (opt-in) — per-request nonce in the
csp_noncerequest attribute, policy built from config, nonce stamping of inline<script>/<style>(skipped ondata-csp-strict-noncelayouts),CspSourceProviderInterfacefor runtime origins,csp_nonce()/|csp_stampTwig helpers - CSP nonce lint —
nowo:http-hardening:lint-csp-nonces [dirs...]fails on inline Twig blocks without a nonce (CI-friendly) - Public cache (opt-in) —
private, max-age=120, must-revalidate+Vary: Cookieon anonymous public pages,publicpolicy on crawler/PWA files, no ETag on nonce'd HTML; coexists with the session strip - Canonical host (opt-in) — single 301 from
www.to the apex host of your public base URL - Safe URLs —
SafeInternalRedirectservice (open-redirect guard) andSafeHref, with optionalsafe_internal_path()/safe_href()Twig functions
Compatible with Symfony 7.4, 8.0, and 8.1. PHP 8.2+ (Symfony 8.x requires PHP 8.4+).
Requirements
- PHP ≥ 8.2
- Symfony 7.4 or 8.x (
http-kernel,security-core) - Optional:
twig/twig(Twig helpers),symfony/console(lint command)
Quick start
Security headers are on by default. Everything else (session strip, CSP, public cache, canonical host, safe-URL Twig functions) is opt-in — see Usage.
Documentation
- Installation
- Configuration
- Usage
- Contributing
- Code of Conduct
- Changelog
- Upgrading
- Release
- Security
- Engram
- Spec-driven development
- GitHub Spec Kit
Additional documentation
- PSR evaluation
Tests and coverage
PHP statement coverage: 100% (Clover gate ≥99% in CI).
License
MIT — Nowo.tech
All versions of http-hardening-bundle with dependencies
PHP Build Version
Package Version
Requires
php Version
>=8.2 <8.6
symfony/config Version ^7.4 || ^8.0
symfony/dependency-injection Version ^7.4 || ^8.0
symfony/http-foundation Version ^7.4 || ^8.0
symfony/http-kernel Version ^7.4 || ^8.0
symfony/security-core Version ^7.4 || ^8.0
symfony/yaml Version ^7.4 || ^8.0
symfony/config Version ^7.4 || ^8.0
symfony/dependency-injection Version ^7.4 || ^8.0
symfony/http-foundation Version ^7.4 || ^8.0
symfony/http-kernel Version ^7.4 || ^8.0
symfony/security-core Version ^7.4 || ^8.0
symfony/yaml Version ^7.4 || ^8.0
The package nowo-tech/http-hardening-bundle contains the following files
Loading the files please wait ...