Laravel-Security

Laravel Security Laravel Security 由 Graham Campbell 创建并维护，它是一个面向 Laravel 的 voku/anti-xss 封装，基于 graham-campbell/security-core。欢迎查看更新日志、发布版本、安全策略、许可协议、行为准则和贡献指南。 安装 本版本要求 PHP 8.0-8.3，并支持 Laravel 9-11。 要获取最新版本，只需使用 Composer 引入该项目即可： root@kitploit: $ composer require "graham-campbell/security:^11.2"...

GHSA-Q2QJ-628G-VHFW Insecure header validation in slim/psr7

Impact An attacker could sneak in a newline \n into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. An attacker that is able to control the header names that are passed to Slilm-Ps...

HTTP Proxy header vulnerability

Bug Fixes Removed support for using HTTPPROXY environment variable for non-CLI apps per CVE-2016-5385 httpoxy. Graham Campbell 143 145 Convert BUGSNAGNOTIFYRELEASESTAGES to a comma-delimited array Jason Graham Campbell 142 144...