Code Weaver

Helps Laravel developers discover, compare, and choose open-source packages. See popularity, security, maintainers, and scores at a glance to make better decisions.

Laravel Csp Laravel Package

spatie/laravel-csp

Add Content Security Policy (CSP) headers to your Laravel app with easy configuration and preset policies. Control which scripts, styles, images, and connections are allowed, reduce XSS/data exfiltration risk, and support reporting and nonces.

View on GitHub

Deep Wiki

Context7

3.25.0

What's Changed

Support separate report endpoints for the report-only CSP policy by @freekmurze in https://github.com/spatie/laravel-csp/pull/211

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.24.1...3.25.0

3.24.1

What's Changed

Add Directive::IMG:Scheme::DATA for Bootstrap by @weshooper in https://github.com/spatie/laravel-csp/pull/209

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.24.0...3.24.1

3.24.0

What's Changed

Remove deprecated block-all-mixed-content directive from README by @weshooper in https://github.com/spatie/laravel-csp/pull/206
Add report-to support without removing report-uri by @freekmurze in https://github.com/spatie/laravel-csp/pull/208

New Contributors

@weshooper made their first contribution in https://github.com/spatie/laravel-csp/pull/206

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.23.1...3.24.0

3.23.1

What's Changed

Switch to scoped singletons to support Laravel Octane by @m-fi in https://github.com/spatie/laravel-csp/pull/205

New Contributors

@m-fi made their first contribution in https://github.com/spatie/laravel-csp/pull/205

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.23.0...3.23.1

3.23.0

What's Changed

Add Laravel 13 support

3.22.0

What's Changed

Update README.md by @MartinCamen in https://github.com/spatie/laravel-csp/pull/201
Add Plain CSP preset by @tomwelch in https://github.com/spatie/laravel-csp/pull/202

New Contributors

@MartinCamen made their first contribution in https://github.com/spatie/laravel-csp/pull/201
@tomwelch made their first contribution in https://github.com/spatie/laravel-csp/pull/202

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.21.0...3.22.0

3.21.0

What's Changed

feat: Add Rollbar CSP preset by @MoT3rror in https://github.com/spatie/laravel-csp/pull/200

New Contributors

@MoT3rror made their first contribution in https://github.com/spatie/laravel-csp/pull/200

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.20.0...3.21.0

3.20.0

What's Changed

Google Maps Preset by @nessimabadi in https://github.com/spatie/laravel-csp/pull/199

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.19.0...3.20.0

3.19.0

What's Changed

feat: Chargebee CSP Preset by @shawnhooper in https://github.com/spatie/laravel-csp/pull/197
feat: TrackJS CSP Preset by @shawnhooper in https://github.com/spatie/laravel-csp/pull/198

New Contributors

@shawnhooper made their first contribution in https://github.com/spatie/laravel-csp/pull/197

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.18.0...3.19.0

3.18.0

What's Changed

Feat: add SurveyMonkey preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/196

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.17.2...3.18.0

3.17.2

What's Changed

Fix: update JsDelivr preset to include connect-src directive by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/195

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.17.1...3.17.2

3.17.1

What's Changed

Update issue template by @AlexVanderbist in https://github.com/spatie/laravel-csp/pull/193
Add European/German location URL for Sentry by @pelmered in https://github.com/spatie/laravel-csp/pull/194

New Contributors

@AlexVanderbist made their first contribution in https://github.com/spatie/laravel-csp/pull/193
@pelmered made their first contribution in https://github.com/spatie/laravel-csp/pull/194

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.17.0...3.17.1

3.17.0

What's Changed

Chore: add missing tests for presets by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/192
Feat: added Alchemer survey preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/191
Fix: vimeo preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/190

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.16.0...3.17.0

3.16.0

What's Changed

feat: add bootstrap preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/189
feat: add vwo preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/188
feat: add maze preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/187
feat: add jquery preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/185
feat: heap analytics preset added by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/186
feat: add cloudflare cdn preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/183
feat: added google lookerstudio preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/184

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.15.0...3.16.0

3.15.0

What's Changed

feat: sentry preset added by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/182
feat: whereby CSP preset added by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/181

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.14.0...3.15.0

3.14.0

What's Changed

Update README.md Vite Nonce Generator Imports by @nessimabadi in https://github.com/spatie/laravel-csp/pull/180
Feat: add algolia preset by @chinmaypurav in https://github.com/spatie/laravel-csp/pull/179

New Contributors

@chinmaypurav made their first contribution in https://github.com/spatie/laravel-csp/pull/179

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.13.1...3.14.0

3.13.1

What's Changed

Docs| Hint the usage of a base64-value for generated nonces by @YasserB94 in https://github.com/spatie/laravel-csp/pull/177
Fix Trusted Types keyword and clarify Preset interface implementation by @leopoletto in https://github.com/spatie/laravel-csp/pull/178

New Contributors

@YasserB94 made their first contribution in https://github.com/spatie/laravel-csp/pull/177
@leopoletto made their first contribution in https://github.com/spatie/laravel-csp/pull/178

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.13.0...3.13.1

3.13.0

What's Changed

Adds Hireroad/Vacancy Filler Recruitment Preset by @atomicjam in https://github.com/spatie/laravel-csp/pull/176

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.12.0...3.13.0

3.12.0

What's Changed

Add Policy@setReportUri() method by @hivokas in https://github.com/spatie/laravel-csp/pull/175

New Contributors

@hivokas made their first contribution in https://github.com/spatie/laravel-csp/pull/175

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.11.1...3.12.0

3.11.1

What's Changed

Use correct format for directives by @adamjgriffith in https://github.com/spatie/laravel-csp/pull/167
HotJar Updates for FONT/STYLE/IMG Directives by @atomicjam in https://github.com/spatie/laravel-csp/pull/170
Fathom Preset Missing Connect by @bashgeek in https://github.com/spatie/laravel-csp/pull/171
MetaPixel Preset is missing connect by @bashgeek in https://github.com/spatie/laravel-csp/pull/174
GoogleTagManager Preset Missing URL by @bashgeek in https://github.com/spatie/laravel-csp/pull/173
GoogleAnalytics Preset Missing Some URL's by @bashgeek in https://github.com/spatie/laravel-csp/pull/172

New Contributors

@bashgeek made their first contribution in https://github.com/spatie/laravel-csp/pull/171

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.11.0...3.11.1

3.11.0

What's Changed

Allow tag manager noscript fallback by @adamjgriffith in https://github.com/spatie/laravel-csp/pull/166

New Contributors

@adamjgriffith made their first contribution in https://github.com/spatie/laravel-csp/pull/166

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.10.0...3.11.0

3.10.0

What's Changed

Add configuration for Vite hot reloading by @ziadoz in https://github.com/spatie/laravel-csp/pull/165

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.9.0...3.10.0

3.9.0

What's Changed

Add HotJar preset by @ziadoz in https://github.com/spatie/laravel-csp/pull/163

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.8.2...3.9.0

3.8.2

What's Changed

Update README.md by @nessimabadi in https://github.com/spatie/laravel-csp/pull/162
Ensure correct report_uri is applied for report-only CSP policies by @andrextor in https://github.com/spatie/laravel-csp/pull/164

New Contributors

@nessimabadi made their first contribution in https://github.com/spatie/laravel-csp/pull/162
@andrextor made their first contribution in https://github.com/spatie/laravel-csp/pull/164

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.8.1...3.8.2

3.8.1

What's Changed

Captcha Services Presets by @atomicjam in https://github.com/spatie/laravel-csp/pull/160

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.8.0...3.8.1

3.8.0

What's Changed

Preset for Meta Pixels by @atomicjam in https://github.com/spatie/laravel-csp/pull/159

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.7.0...3.8.0

3.7.0

What's Changed

Add Vimeo preset by @rbibby in https://github.com/spatie/laravel-csp/pull/158

New Contributors

@rbibby made their first contribution in https://github.com/spatie/laravel-csp/pull/158

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.6.0...3.7.0

3.6.0

What's Changed

3 Presets (Stripe, Plausible, TicketTailor) by @atomicjam in https://github.com/spatie/laravel-csp/pull/156
Skip CSP middleware when Vite is hot reloading by @ziadoz in https://github.com/spatie/laravel-csp/pull/154

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.5.0...3.6.0

3.5.0

What's Changed

docs: remove return from v3 upgrade guide by @audunru in https://github.com/spatie/laravel-csp/pull/153
Add Microsoft Clarity Preset by @atomicjam in https://github.com/spatie/laravel-csp/pull/155

New Contributors

@audunru made their first contribution in https://github.com/spatie/laravel-csp/pull/153
@atomicjam made their first contribution in https://github.com/spatie/laravel-csp/pull/155

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.4.0...3.5.0

3.4.0

What's Changed

Add Cloudflare Web Analytics preset by @ohiader in https://github.com/spatie/laravel-csp/pull/152

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.3.0...3.4.0

3.3.0

What's Changed

Google TLDs CSP preset by @christianschoenmakers in https://github.com/spatie/laravel-csp/pull/148
Posthog CSP preset by @christianschoenmakers in https://github.com/spatie/laravel-csp/pull/149

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.2.0...3.3.0

3.2.0

What's Changed

Intercom preset by @christianschoenmakers in https://github.com/spatie/laravel-csp/pull/147
Bunny Fonts preset by @ndeblauw in https://github.com/spatie/laravel-csp/pull/150
Skip CSP middleware when Laravel is rendering an exception by @ziadoz in https://github.com/spatie/laravel-csp/pull/151

New Contributors

@christianschoenmakers made their first contribution in https://github.com/spatie/laravel-csp/pull/147
@ndeblauw made their first contribution in https://github.com/spatie/laravel-csp/pull/150
@ziadoz made their first contribution in https://github.com/spatie/laravel-csp/pull/151

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.1.0...3.2.0

3.1.0

What's Changed

Update migration guide to use $policy by @patrickomeara in https://github.com/spatie/laravel-csp/pull/144
Update README.md by @jackbayliss in https://github.com/spatie/laravel-csp/pull/145
Ensure null values are removed by @jackbayliss in https://github.com/spatie/laravel-csp/pull/146
Cloudflare Turnstile preset by @ohiader in https://github.com/spatie/laravel-csp/pull/143

New Contributors

@patrickomeara made their first contribution in https://github.com/spatie/laravel-csp/pull/144
@jackbayliss made their first contribution in https://github.com/spatie/laravel-csp/pull/145
@ohiader made their first contribution in https://github.com/spatie/laravel-csp/pull/143

Full Changelog: https://github.com/spatie/laravel-csp/compare/3.0.0...3.1.0

3.0.0

The development goal for version 3 was to reduce the boilerplate of configuring a policy for common services like Google Tag Manager, Fathom Analytics, Adobe Fonts… In addition, we've made it easier to add your own directives through your configuration file, without writing additional code.

For more information, read our blog post on the v3 release.

Upgrading from v2? We have an upgrade guide!

2.10.3

What's Changed

Add support for Laravel 12 by @mfn in https://github.com/spatie/laravel-csp/pull/136

New Contributors

@mfn made their first contribution in https://github.com/spatie/laravel-csp/pull/136

Full Changelog: https://github.com/spatie/laravel-csp/compare/2.10.2...2.10.3

Weaver

How can I help you explore Laravel packages today?

Conversation history is not saved when not logged in.

Add packages to context

No packages found.

hexters/coinpayment

rjcodes/rjcms

act-training/laravel-permissions-manager

alimarchal/laravel-chart-of-accounts

babenkoivan/elastic-scout-driver

mkwebdesign/filament-watchdog-v5

renatomarinho/laravel-page-speed

zedmagdy/filament-business-hours

renatovdemoura/blade-elements-ui

devgeek/beacon-admin

benjamin-rqt/data-watcher-bundle

atriumphp/atrium

sandermuller/package-boost-laravel

sandermuller/boost-skills

redaxo/core

yusufgenc/filament-api-forge

l3aro/rating-star-for-filament

leek/filament-subtenant-scope

anil/file-picker

broqit/fields-ai