Laravel-Mitnick helps you secure your Laravel apps by setting various HTTP headers. it can help!
First, You can install the package via composer:
composer require mitnick/laravel-security
For installation instructions, in-depth usage and deployment details, please take a look at the official documentation.
Laravel-Mitnick has a few requirements you should be aware of before installing :
- Composer
- Laravel Framework 5.4+
| Vulnerability | Middleware Class | Included |
|---|---|---|
| Cache Control Attack | Mitnick\Laravel\Security\cache::class | ✔ |
| Cross-Origin Resource Sharing (CORS) | Mitnick\Laravel\Security\cors::class | ✔ |
| X-Permitted-Cross-Domain-Policies | Mitnick\Laravel\Security\crossDomain::class | ✔ |
| DNS Prefetch Control | Mitnick\Laravel\Security\dns::class | ✔ |
| Click Jacking Attack | Mitnick\Laravel\Security\frameGuard::class | ✔ |
| Strict-Transport-Security | Mitnick\Laravel\Security\hsts::class | ✔ |
| Mime Sniffing Attack | Mitnick\Laravel\Security\noSniff::class | ✔ |
| X-Powered-By Attack | Mitnick\Laravel\Security\xPoweredBy::class | ✔ |
| XSS Attack | Mitnick\Laravel\Security\xss::class | ✔ |
The Laravel-Mitnick package is open-source software licensed under the MIT license.