skills.rest
dirnbauer
dirnbauerCOMMUNITY
Explore all skills by this author →
Website𝕏@KDirnbauerGitHub

typo3-security

Harden TYPO3 v13/v14 installations with a structured security blueprint.

33|6|Updated Jan 2, 2026
Search Tags:#security#backend#CSP#configuration#typo3#hardening
One-click install
npx skills add https://github.com/dirnbauer/webconsulting-skills --skill typo3-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: typo3-security
Source: https://github.com/dirnbauer/webconsulting-skills/tree/main/skills/typo3-security
Command: npx skills add https://github.com/dirnbauer/webconsulting-skills --skill typo3-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

TYPO3 deployments often suffer from misconfigurations and weak security practices that expose admin panels, sensitive data, and sites to attacks. This Skill provides a structured security hardening blueprint for TYPO3 v13/v14, covering core config, access controls, CSP, install tool, and ongoing audits.

Core Features & Use Cases

  • Configuration hardening: Guidelines for BE/FE/SYS settings, trusted hosts, session management, encryption, logging, and error handling to reduce attack surfaces.
  • Access control & MFA: Backend user authentication improvements, MFA requirements, and admin access logging to deter unauthorized access.
  • Content Security Policy & defenses: CSP enablement and headers to prevent XSS, clickjacking, and data exfiltration; file upload protections.
  • Go-live & maintenance checklist: Step-by-step audit for production readiness, monitoring, and regular updates.

Quick Start

Apply the TYPO3 security guidelines to your environment by editing config/system/settings.php and related config values; enable CSP via SYS features; secure the Install Tool; implement MFA and trusted hosts; then run a security audit using the provided checklist to validate the configuration.

Frequently Asked Questions about typo3-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden TYPO3 backend security and configure trusted hosts?▼

TYPO3 backend security hardening involves editing config/system/settings.php to enforce trusted hosts, strengthen session management, and implement MFA requirements for admin users. This structured blueprint provides exact configuration values to reduce attack surfaces.

What's the best way to enable Content Security Policy in TYPO3 v13/v14?▼

Enabling CSP in TYPO3 v13/v14 requires activating the feature via SYS settings and configuring response headers to prevent XSS and clickjacking. This hardening guide specifies exact configuration values for implementing robust frontend protections.

How do I secure the TYPO3 Install Tool and configure file permissions for production?▼

Securing the TYPO3 Install Tool and setting file permissions are critical production hardening steps. This guide provides an actionable checklist covering install tool lockdown, file permission structures, and error handling configurations for go-live readiness.

Does this TYPO3 security hardening blueprint apply to older TYPO3 versions?▼

This security hardening blueprint is specifically designed for TYPO3 v13 and v14 installations. It targets the configuration structures of these versions, including settings.php and SYS controls, ensuring exact best practices for supported platforms.

Why does my TYPO3 deployment still expose sensitive data after basic backend hardening?▼

TYPO3 deployments often remain vulnerable due to missing CSP headers, weak file upload protections, or inadequate error handling. A comprehensive audit using the provided maintenance checklist validates SYS settings and identifies remaining security gaps.

Related Skills

Explore More Software Engineering Skills→
Snowflake-LabsSnowflake-Labs
12

read-ors-configuration

A concise summary of your roleplay character: name,</name> personality, and/or behavior, formatted as a single string sentence. Typically不超过50字，此处省略

Official
Intermediate
chroniicallydiistractedchroniicallydiistracted

better-auth-security-best-practices

Configure Better Auth secrets, rate limiting, CSRF, sessions, and OAuth token encryption.

Community
Advanced
truongnattruongnat

vps-devops-pro

Provision, harden, and automate VPS server operations with UFW and Caddy.

Community
Advanced
BigdropsBigdrops
1

capacitor-security

Scan Capacitor apps for security vulnerabilities using Capsec.

Community
Advanced