Freek.dev

This package ensures that your application doesn't have installed dependencies with known security vulnerabilities.

...

The checks are only executed when adding a new dependency via composer require or when running composer update: deploying an application with a valid composer.lock and via composer install won't trigger any security versions checking.

Awesome idea! It works by leveraging the "conflict"-property in the composer.json-file of the package.

Read more

Squire is an HTML5 rich text editor, which provides powerful cross-browser normalisation, whilst being supremely lightweight and flexible.

...

Unlike other HTML5 rich text editors, Squire was written as a component for writing documents (emails, essays, etc.), not doing wysiwyg websites. If you are looking for support for inserting form controls or flash components or the like, you'll need to look elsewhere.

Read more

Last week Bramus presented a cool mixed content scanner on his blog. Just for fun/as an excercise I made my own version.

The core scanner is mostly a copy of Bramus' code but there are a few noticeable differences. My version:

• can be installed via composer
• uses the Symfony console component
• uses Guzzle instead of naked curl
• can write the scanresults as json to a file

You'll find the instructions how to use it on github.

Read more

Nginx Server Configs is a collection of configuration snippets that can help your server improve the web site's performance and security, while also ensuring that resources are served with the correct content-type and are accessible, if needed, even cross-domain.

Read more

With my recent move to HTTPS I wasn’t sure if there were any pages left on my site that had Mixed Content or not. To check this I wrote a little PHP CLI app to scan an HTTPS website for Mixed Content. The script starts crawling at a given URL, and processes the page.

Nice!

Read more

Here's a great Laravel package if you want to use the no CAPTCHA reCATCHA that was introduced by Google last week:

https://github.com/anhskohbo/no-captcha

Personally I'd go for a honeypot before resorting to a recaptcha because a honeypot is invisible for users. Here's a good package by Maksim Surguy if you want to go that route:

https://github.com/msurguy/Honeypot

Read more

Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.

Read more

Mousetrap is a simple library for handling keyboard shortcuts in Javascript.

https://github.com/ccampbell/mousetrap

Read more