codeinc/security-middleware

A collection of PSR-15 middleware to manage HTTP security

Security PSR-15 middlewares

This library provides a collection of PSR-15 middleware to manage HTTP security., _(*1)

The collection includes

• ContentSecurityPolicyMiddleware Adds a Content-Security-Policy HTTP headers to the response
• ContentTypeOptionsMiddleware Adds a X-Content-Type-Options HTTP headers to the response
• ExpectCtMiddleware Adds a Expect-CT HTTP headers to the response
• FrameOptionsMiddleware Adds a X-Frame-Options HTTP headers to the response
• ReferrerPolicyMiddleware Adds a Referrer-Policy HTTP headers to the response
• StrictTransportSecurityMiddleware Adds a Strict-Transport-Security HTTP headers to the response
• XssProtectionMiddleware Adds a X-Xss-Protection HTTP headers to the response
• BlockUnsecureRequestsMiddleware Blocks unsecure (other than HTTPS) requests responses

Installation

This library is available through Packagist and can be installed using Composer:, _(*2)

composer require codeinc/security-middleware

:speech_balloon: This library is extracted from the now deprecated codeinc/psr15-middlewares package., _(*3)

License

The library is published under the MIT license (see LICENSE file)., _(*4)