Version 5 supported

Built-in middleware

Silverstripe CMS has a number of Middleware components. Some of them are listed here. Many of them are in the SilverStripe\Control\Middleware namespace.

Name	Description
`AllowedHostsMiddleware`	Secures requests by only allowing a whitelist of Host values
`AuthenticationMiddleware`	Handles authentication for the request
`CanonicalURLMiddleware`	URL normalisation and redirection
`ChangeDetectionMiddleware`	Change detection via Etag / IfModifiedSince headers, conditionally sending a 304 not modified if possible.
`ConfirmationMiddleware`	Checks whether user manual confirmation is required for HTTPRequest
`DevelopmentAdminConfirmationMiddleware`	A specific subclass of `ConfirmationMiddleware` which handles the `/dev/*` routes.
`ExecMetricMiddleware`	Display execution metrics in DEV mode
`FlushMiddleware`	Triggers a call to flush() on all Flushable implementors
`HTTPCacheControlMiddleware`	Controls HTTP response cache headers
`PasswordExpirationMiddleware`	Check if authenticated user has password expired
`RateLimitMiddleware`	Access throttling, controls HTTP Retry-After header
`SessionMiddleware`	PHP Session initialisation
`TrustedProxyMiddleware`	Rewrites headers that provide IP and host details from upstream proxies
`URLSpecialsMiddleware`	Controls some of the URL special variables