Skip to content

Latest commit

 

History

History
32 lines (23 loc) · 1.75 KB

README.md

File metadata and controls

32 lines (23 loc) · 1.75 KB

TYPO3 11 TYPO3 12

TYPO3 Extension ls_security_headers

This extension offers configurable security headers for the frontend.

Setup

  1. Install the extension by using composer
  2. Create a "Security Headers" record on the root page and configure the desired headers
  3. Validate your configuration with securityheaders.com

Infos

  • Security Headers that are defined in the .htaccess or in some other server configuration will not be overwritten.
  • If EXT:staticfilecache is used, you have to extend the validHtaccessHeaders extension setting.
  • Security Headers for the TYPO3 Backend can be defined in AdditionalConfiguration.php with the BE setting "HTTP".

Nonce support

This extension includes a ViewHelper for generating CSP nonces (NonceViewHelper).
All the nonces generated by the ViewHelper during the request will automatically be added to the Content-Security-Policy header at the end of the request.
Basic usage:

<style nonce="{ls:csp.nonce(policy: 'style', length: '48')}">

The policy argument defines the policy the nonce should be added to (style for style-src, script for script-src, ...).
The length argument defines the length of the nonce in bytes (default is 32).

Ressources

LIMESODA Website Security