Security

$form = new Form();

if ($kirby->request()->is('POST')) {
    // Call security
    $form->spamWordsGuard();

    // .. more code
}

'nerdcel.kirby-oauth2-email' => [
    'callback-path' => 'callback-path',
    'enabled' => true,
    'email' => 'example@your-provider.tdl',
    'service' => 'azure',
    'client-id' => 'your-client-id',
    'client-secret' => 'your-client-secret',
    'refresh-token' => 'your-refresh-token',
];

'/^(?=.*[0-9])(?=.*[!@#$%^&*])[A-Za-z\d!@#$%^&*]{16,}$/'

<form action="<?= $page->url() ?>" method="post">
    <!-- ... -->

    <?= csrf_field() ?>
    <?= turnstileField() ?>
    <input type="submit" value="Submit">
</form>
<?= turnstileScript() ?>

fields:
  security: fields/locked-pages

\Beebmx\KirbyEnv::load('main/path');

return [
    'debug'  => env('KIRBY_DEBUG', false),
    'secret' => env('SECRET_KEY'),
    'public' => env('PUBLIC_KEY'),
];

env('APP_DEBUG');

return [
    'bnomei.securityheaders.headers' => [
        'X-Frame-Options'        => 'SAMEORIGIN',
        'X-XSS-Protection'       => '1; mode=block',
        'X-Content-Type-Options' => 'nosniff',
        ...
    ]
];