cline/cloak

Prevent sensitive exception details from leaking in Laravel applications

dev-main 2025-12-08 06:54 UTC

Requires

• php: ^8.5.0
• illuminate/contracts: ^11.0 || ^12.0
• illuminate/support: ^11.0 || ^12.0
• spatie/laravel-package-tools: ^1.92.7

Requires (Dev)

• cline/coding-standard: ^1.5.8
• orchestra/testbench: ^10.8
• symfony/var-dumper: ^7.4.0

MIT

• Brian Faust

• php
• security
• exceptions
• laravel
• error-handling

README

Cloak is a security-focused Laravel package that prevents sensitive information from leaking through exception messages and stack traces. It automatically sanitizes database credentials, API keys, tokens, and other sensitive data before they reach your users or logs.

Requirements

Requires PHP 8.5+ and Laravel 11+

Installation

composer require cline/cloak

Documentation

• Getting Started - Installation, configuration, and basic usage
• Custom Patterns - Configure regex patterns to match your sensitive data
• Exception Handling - Fine-grained control over exception sanitization
• Real-World Examples - Practical examples for common scenarios
• Security Best Practices - Production configuration and monitoring

Change log

Please see CHANGELOG for more information on what has changed recently.

Contributing

Please see CONTRIBUTING and CODE_OF_CONDUCT for details.

Security

If you discover any security related issues, please use the GitHub security reporting form rather than the issue queue.

Credits

• Brian Faust
• All Contributors

License

The MIT License. Please see License File for more information.