Laravel 9 Create Middleware For XSS Protection

Websolutionstuff | Apr-30-2022 | Categories : Laravel PHP

In this article, we will see laravel 9 create middleware for XSS protection. Cross-site scripting is a type of security vulnerability that can be found in some web applications. XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users. In laravel 9 we use middleware for prevent xss attack on website security. It's very necessory protection from xss attack or any other cyberattack on the website.

So, let's see how to create middleware for XSS protection in laravel 9, laravel 9 XSS validation, laravel 9 create middleware, laravel 9 XSS protection, XSS protection laravel 9.

The XSS filter through we can remove the HTML tag from our input value and also it's very important to remove html tag for the security. Input sanitization is a security protocol for checking, filtering, and cleaning data inputs from app users.

Types of XSS attacks?

There are three main types of XSS attacks:

  • Reflected XSS, where the malicious script comes from the current HTTP request.
  • Stored XSS, where the malicious script comes from the website's database.
  • DOM-based XSS, where the vulnerability exists in client-side code rather than server-side code.
Step 1: Create Middleware

In this step, We have to create custom middleware for XSS prevention in laravel 9. So, copy the below command and run it on the terminal.

php artisan make:middleware XSS

 

 

Step 2: Register Middleware

Now, register middleware in app/http/kernel.php path.

class Kernel extends HttpKernel
{
    protected $routeMiddleware = [
        'XSS' => \App\Http\Middleware\XSS::class,
    ];
}

 

Step 3 : Add code In Middleware File

In this step, we can see new file in app/Http/Middleware/XSS.php and then just put the below code in our XSS.php file. You can directly use strip_tags() in any input filed of save data in controller.

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;

class XSS
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle(Request $request, Closure $next)
    {
        $input = $request->all();
        array_walk_recursive($input, function(&$input) {
            $input = strip_tags($input);
        });
        $request->merge($input);
        return $next($request);
    }
}

 

 

Step 4 : Route

Now, we are using XSS middleware in our routes.php file

routes/web.php

<?php

use Illuminate\Support\Facades\Route;
use App\Http\Middleware\XSS;
use App\Http\Controllers\UserController;

Route::group(['middleware' => ['XSS']], function () {
    Route::get('xss_prevention', [UserController::class,'xssPrevention']);
    Route::post('xss_prevention_data_store', [UserController::class,'xssPreventionStore'])->name('xssPreventionStore');
});

 


You might also like :

Recommended Post
Featured Post
How To Login With Magic Link In Laravel 9
How To Login With Magic Link I...

In this article, we will see how to login with magic link in laravel 9. Here, we will learn passwordless login with...

Read More

Feb-01-2023

Laravel 9 whereDay / whereYear / whereTime Example
Laravel 9 whereDay / whereYear...

In this article, we will see the laravel 9 whereDay / whereYear / whereTime query example. The whereDay&n...

Read More

Oct-20-2022

How to Delete Files from OneDrive in Laravel 11
How to Delete Files from OneDr...

Managing files in cloud storage is essential for modern web applications. In this article, I’ll show you how to de...

Read More

Dec-24-2024

Laravel 9 Import Export CSV/EXCEL File Example
Laravel 9 Import Export CSV/EX...

In this tutorial, I will give you laravel 9 import export csv and excel file example. We will simply create import...

Read More

Feb-19-2022