thecodingmachine/csrf-header-check-middleware

A PHP PSR-15 (http-interop) compliant middleware that defends your application against CSRF attacks.

csrf-header-check-middleware's Issues

2.0 release (PSR-15)

It looks you implemented the migrations to psr/http-server-middleware^1.0 back in february, but a release was never published.

What's the state of the unstable 2.x package published to Packagist?

Is there any work to be done before you can tag and release this?

I think this middleware is exactly what I've been looking for - a bare minimum of CSRF protection without developer intervention. We want our developers to use CSRF-keys on sensitive forms, of course - but this at least would provide some degree of protection against the easiest attacks.

I'm actually surprised that something like this isn't standard in every PHP stack.

Let me know if I can help :-)