10 Laravel packages tagged “content security policy”

Most downloaded: spatie/laravel-csp, with 13,511,258 downloads and 870 GitHub stars. Ranked by total downloads — use the controls below to sort by stars, most recently updated, or name.

spatie/laravel-csp

Add CSP headers to the responses of a Laravel app
870 13,511,258

bepsvpt/secure-headers

Add security related headers to HTTP response. The package includes Service Providers for easy Laravel integration.
551 5,806,720

stevenmaguire/laravel-middleware-csp

Provides support for enforcing Content Security Policy with headers in Laravel responses.
39 107,830

hdvinnie/laravel-security-headers

Adds security related headers to HTTP response.
1 103,235

sloyakuza/laravel-security-headers

Adds security related headers to HTTP response.
13,851

artisanpack-ui/security

Core Laravel security toolkit — input sanitization, output escaping, KSES filtering, security headers, XSS protection, basic rate limiting, and Content Security Policy. Authentication / 2FA / RBAC / file uploads / analytics / compliance live in sibling packages.
11,381

zae/content-security-policy

A really easy way to build CSP headers and add them to the response.
7,399

offline/laravel-csp

Add CSP headers to the responses of a Laravel app (Fork)
1 5,576

jeffersongoncalves/filament-security-headers

Filament settings page for laravel-security-headers: edit the Content Security Policy, response headers and HSTS from the panel, with a report-only mode to try a policy before enforcing it.
1 1,097

make-dev/laravel-security

Modern security headers for Laravel — turn-key. Strict CSP with per-request nonces and 'strict-dynamic', Subresource Integrity with smart noise filtering, HSTS, Permissions-Policy. An interactive setup wizard asks which third parties you use (GTM, HubSpot, Stripe, reCAPTCHA, and a dozen more) and wires the right directives automatically. First-party violation reporting endpoints, Filament + Livewire + Vite friendly, Vapor-ready. Laravel 11, 12, 13 on PHP 8.2+.
1 189