j0k3r/httplug-ssrf-plugin
HTTPlug plugin to mitigate SSRF by validating URL parts against configurable allow/deny lists. Resolves hostnames to IPs, blocks private networks by default, and restricts schemes to HTTP/HTTPS. Throws InvalidURLException on invalid targets.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| artisanpack-ui/security | 0.78 | Core Laravel security toolkit for ArtisanPack UI: input sanitization, output escaping, KSES filtering, validation rules, security headers, XSS protection, rate limiting, and CSP with nonces, presets, and violation reporting, plus audit, scan, and benchmark Artisan commands. | 1 | 0 | 1 | 4K | 7 | 18.7 | 52.5 | MIT | 3 months ago | |
| make-dev/laravel-security | 0.78 | Drop-in security headers for Laravel 11–13: HSTS, CSP with per-request nonces and strict-dynamic, X-Content-Type-Options, Permissions-Policy, and Subresource Integrity. Includes CSP/SRI violation report endpoints, logging/db storage, and Vapor-friendly SRI manifests. | 1 | 1 | 0 | 91 | 0 | 10.4 | 25.0 | MIT | 6 months ago | |
| pratik-dabhi/laravel-firewall | 0.78 | Laravel firewall middleware for blocking abusive traffic by IP rules such as allow/deny lists and access restrictions. Helps protect routes and applications from unwanted requests with simple configuration and integration into a Laravel app. | 1 | 1 | 0 | 0 | 0 | 13.2 | — | MIT | 7 months ago | |
| depthbomb/csrf-bundle | 0.78 | — | 0 | 0 | 0 | 0 | 0 | 0.3 | — | MIT | 3 years ago | |
| nette/http | 0.77 | Nette HTTP is a lightweight PHP library for handling HTTP requests and responses. It provides clean APIs for headers, cookies, sessions, URL parsing, file uploads, and response output, making it easy to build robust web applications and services. | 489 | 509 | 88 | 442K | 2 | 35.0 | 48.6 | NOASSERTION | 2 weeks ago | |
| 14four/laravel-force-host | 0.77 | Middleware for Laravel that forces a single canonical host for all requests. Automatically redirects to your configured domain (and optionally scheme), preventing duplicate URLs across www/non-www and improving SEO, cache consistency, and security. | 0 | 0 | — | 0 | — | 0.0 | — | — | — | |
| artisansdk/ratelimiter | 0.77 | Laravel rate limiting package providing flexible throttling for routes and actions with configurable rules, storage drivers, and easy middleware integration. Helps protect APIs from abuse, control request bursts, and manage per-user or per-IP limits with clear, adjustable settings. | 152 | 153 | 14 | 258K | 1 | 11.1 | 47.2 | MIT | 8 months ago | |
| cresjie/ip-blocker | 0.77 | Simple Laravel 5 IP blocker. Install via Composer, publish config, and list blocked IPs in config/cresjie/block-ip.php. When a request matches, it throws IpBlockerException so you can render a custom “blocked” view in your exception handler. | 3 | 3 | 0 | 0 | 0 | 0.9 | — | MIT | 9 years ago | |
| sourcetoad/rule-helper-for-laravel | 0.77 | A Laravel package that adds fluent helpers for building validation rule arrays, including RuleSet and Rule classes, reusable defined rule sets, and conditional required helpers such as requiredIfAll and requiredIfAny. | 9 | 9 | 1 | 9K | 0 | 26.1 | 47.2 | MIT | 1 month ago | |
| spatie/laravel-littlegatekeeper | 0.77 | Laravel middleware to password-protect your app with a single, universal username/password set in config. Quickly gate staging, previews, or temporary launches without building a full auth system; publish config and enable the provider to lock down pages. | 191 | 193 | 20 | 8K | 0 | 11.4 | 23.3 | MIT | 8 months ago | |
| subhashladumor1/laravel-cybershield | 0.77 | Enterprise security intelligence for Laravel: signature-based WAF, adaptive rate limiting, bot fingerprinting, API integrity checks, threat scoring, malware scanning, and forensic logging—working together to block modern attacks. Beta; APIs may change. | 15 | 15 | 1 | 0 | 0 | 8.9 | — | MIT | 7 months ago | |
| php-http/socket-client | 0.77 | PSR-7/PSR-18 HTTP client built on PHP streams. Supports TCP and UNIX domain sockets, TLS/SSL encryption, and client certificates. Lightweight, dependency-minimal option for making HTTP requests via socket connections. | 81 | 82 | 42 | 115K | 0 | 9.9 | 44.9 | MIT | 9 months ago | |
| php-http/httplug-bundle | 0.77 | — | 390 | 391 | 50 | 301K | 5 | 23.4 | 44.3 | MIT | 6 months ago | |
| adimeo-data-suite/security | 0.76 | Laravel security toolkit for Adimeo Data Suite apps, providing common security utilities and integrations such as authentication/authorization helpers, hardened defaults, and middleware-friendly protections to secure APIs and admin back offices. | 0 | 0 | 0 | 7 | 0 | 0.0 | 12.5 | — | — | |
| php-http/throttle-plugin | 0.76 | PSR-7/PSR-18 HTTP client plugin that throttles outgoing requests to control rate and concurrency. Useful for API clients that must respect provider limits, avoid burst traffic, and smooth request flow. | 2 | 2 | 2 | 814 | 1 | 0.2 | 33.6 | MIT | — | |
| salehye/laravel-security | 0.76 | — | 0 | 0 | 0 | 0 | 0 | 0.0 | — | MIT | — | |
| codeages/plugin-bundle | 0.76 | — | 7 | 7 | 9 | 26 | 1 | 0.6 | 9.1 | — | — | |
| bepsvpt/secure-headers | 0.76 | — | 550 | 553 | 48 | 200K | 2 | 4.6 | 35.3 | MIT | — | |
| bezhansalleh/filament-plugin-essentials | 0.76 | Essential traits for Filament plugin development that handle the boilerplate for you, so you can focus on shipping real features faster. Supports Filament 4.x and 5.x. | 26 | 26 | 16 | 606K | 0 | 17.0 | 62.2 | MIT | 3 months ago | |
| inigopascall/spamguard | 0.76 | Laravel package to help detect and block spam in forms and user submissions. Adds simple anti-spam checks and validation hooks to reduce bot signups and junk messages, with easy configuration for common use cases. | 0 | 0 | 0 | 10 | 0 | 0.3 | 14.4 | — | 3 years ago |
How can I help you explore Laravel packages today?