typo3-security
TYPO3 Security Hardening
Compatibility: TYPO3 v14.x Configuration examples require verification against the installed v14 source and the deployment's trust/proxy model; they are not a universal drop-in preset.
For an assessment, inspect and report without changing configuration, accounts or permissions. Implement hardening only when requested. Inside an upgrade graph, address the assigned finding and return evidence; unrelated hardening belongs to separately authorized scope, not an automatic loop.
TYPO3 API First: Always use TYPO3's built-in APIs, core features, and established conventions before creating custom implementations. Do not reinvent what TYPO3 already provides. Always verify that the APIs and methods you use exist and are not deprecated in TYPO3 v14 by checking the official TYPO3 documentation.