Baroshem / nuxt-security

🛡 Automatically configure your app to follow OWASP security patterns and principles by using HTTP Headers and Middleware

https://nuxt-security.vercel.app/

MIT License

737 stars 56 forks source link

basic-authentication cors csrf headers-security module nonce nuxt owasp rate-limiting security vue xss

readme

Nuxt Security

Automatically configure your app to follow OWASP security patterns and principles by using HTTP Headers and Middleware.

This module works with Nuxt 3 only

Features

Security response headers (including CSP for SSG apps)
Request Size & Rate Limiters
Cross Site Scripting (XSS) Validation
Cross-Origin Resource Sharing (CORS) support
Hide X-Powered-By header and remove console loggers utils
[Optional] Allowed HTTP Methods, Basic Auth, CSRF

Usage

Install the module:

npx nuxi@latest module add security

And that's it! The module will now register route rules and server middlewares globally so that your application will be more secured.

Configuration

You can pass configuration to the module in the nuxt.config.ts like following:

export default defineNuxtConfig({
  modules: ["nuxt-security"],
  security: {
    // options
  }
})

For all available configuration options check out the docs.

Development

Run yarn dev:prepare to generate type stubs.
Use yarn dev to start playground in development mode.

License