Add security related headers to HTTP response. The package includes Service Providers for easy Laravel integration.
Version
9.0.0
Supported Laravel Version
5.1 ~ 12.x
Installation
Non Laravel Project
Install using composer
composer require bepsvpt/secure-headers
Copy config file to your project directory
cp vendor/bepsvpt/secure-headers/config/secure-headers.php path/to/your/project/directory
Set up config file
Done!
Laravel Project
Install using composer
composer require bepsvpt/secure-headers
Add service provider in config/app.php ( laravel version < 5.5 )
Bepsvpt\SecureHeaders\SecureHeadersServiceProvider::class,
Publish config file
php artisan vendor:publish --provider="Bepsvpt\SecureHeaders\SecureHeadersServiceProvider"Add global middleware in app/Http/Kernel.php ( laravel version < 12 )
\Bepsvpt\SecureHeaders\SecureHeadersMiddleware::class,
Add global middleware in bootstrap/app.php ( laravel version >= 12 )
->withMiddleware(function (Middleware $middleware): void { $middleware->append(\Bepsvpt\SecureHeaders\SecureHeadersMiddleware::class); })
Set up config file config/secure-headers.php
Done!
Lumen Project
Install using composer
composer require bepsvpt/secure-headers
Add service provider in bootstrap/app.php
$app->register(Bepsvpt\SecureHeaders\SecureHeadersServiceProvider::class);
Copy config file to project directory
mkdir config cp vendor/bepsvpt/secure-headers/config/secure-headers.php config/secure-headers.php
Add global middleware in bootstrap/app.php
$app->middleware([ \Bepsvpt\SecureHeaders\SecureHeadersMiddleware::class, ]);
Set up config file config/secure-headers.php
Done!
Usage(Non Laravel Project)
Do not forget to import namespace.
<?php use \Bepsvpt\SecureHeaders\SecureHeaders;
Instance
<?php // instantiate the class by fromFile static method $secureHeaders = SecureHeaders::fromFile('/path/to/secure-headers.php'); // or instantiate the class directly $config = require '/path/to/secure-headers.php'; $config['key'] = 'value'; // modify config value if needed $secureHeaders = new SecureHeaders($config);
Send
// Get headers $secureHeaders->headers(); // Send headers to HTTP response $secureHeaders->send();
Document and Notice
Please see DOCS for details.
Changelog
Please see CHANGELOG for details.
Upgrade
Please see UPGRADE for details.
License
Secure Headers is licensed under The MIT License (MIT).