|string> [filter_name => classname] * or [filter_name => [classname1, classname2, ...]] * @phpstan-var array> */ public array $aliases = [ 'csrf' => CSRF::class, 'toolbar' => DebugToolbar::class, 'honeypot' => Honeypot::class, 'invalidchars' => InvalidChars::class, 'secureheaders' => SecureHeaders::class, 'authMVC' => AuthMVC::class, 'HttpRequestLog' => HttpRequestLog::class ]; /** * List of filter aliases that are always * applied before and after every request. * * @var array>>|array> * @phpstan-var array>|array>> */ public array $globals = [ 'before' => [ 'HttpRequestLog', 'csrf', // 'invalidchars', ], 'after' => [ // 'HttpRequestLog', //'authMVC', // 'secureheaders', ], ]; /** * List of filter aliases that works on a * particular HTTP method (GET, POST, etc.). * * Example: * 'post' => ['foo', 'bar'] * * If you use this, you should disable auto-routing because auto-routing * permits any HTTP method to access a controller. Accessing the controller * with a method you don't expect could bypass the filter. */ public array $methods = []; /** * List of filter aliases that should run on any * before or after URI patterns. * * Example: * 'isLoggedIn' => ['before' => ['account/*', 'profiles/*']] */ public array $filters = []; }