🔐 Laravel-Mitnick

Laravel-Mitnick helps you secure your Laravel apps by setting various HTTP headers. It's not a silver bullet, but it can help!

Quick start

First, You can install the package via composer:

composer require mitnick/laravel-security

If you would like to assign middleware to specific routes, you should first assign the middleware a key in your app/Http/Kernel.php file. By default, the $routeMiddleware property of this class contains entries for the middleware included with Laravel

// Within App\Http\Kernel Class...

protected $routeMiddleware = [
    'auth' => \App\Http\Middleware\Authenticate::class,
    'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
    'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class,
    'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
    'can' => \Illuminate\Auth\Middleware\Authorize::class,
    'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
    'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
    'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
    'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
    'no-cache' => \Mitnick\Laravel\Security\cache::class
];

Documentation

For installation instructions, in-depth usage and deployment details, please take a look at the official documentation.

Requirements

Laravel-Mitnick has a few requirements you should be aware of before installing :

Composer
Laravel Framework 5.4+

Solved : Security vulnerability

Laravel-Mitnick is a collection of 9 smaller middleware functions that set HTTP response headers.

Vulnerability	Middleware Class	Included
Cache Control Attack	Mitnick\Laravel\Security\cache::class	✔
Cross-Origin Resource Sharing (CORS)	Mitnick\Laravel\Security\cors::class	✔
X-Permitted-Cross-Domain-Policies	Mitnick\Laravel\Security\crossDomain::class	✔
DNS Prefetch Control	Mitnick\Laravel\Security\dns::class	✔
Click Jacking Attack	Mitnick\Laravel\Security\frameGuard::class	✔
Strict-Transport-Security	Mitnick\Laravel\Security\hsts::class	✔
Mime Sniffing Attack	Mitnick\Laravel\Security\noSniff::class	✔
X-Powered-By Attack	Mitnick\Laravel\Security\xPoweredBy::class	✔
XSS Attack	Mitnick\Laravel\Security\xss::class	✔

Contributing

Whether you're helping us fix bugs, improve the docs, or spread the word, we'd love to have you as part of the Laravel-Mitnick community! 💪💜 See CONTRIBUTING.md for more information on what we're looking for and how to get started.

License

The Laravel-Mitnick package is open-source software licensed under the MIT license.

mitnick/laravel-security

laravel-mitnick helps you secure your Laravel apps by setting various HTTP headers. it can help!