diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..1b4d0bb
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,4 @@
+.git
+database/database.sqlite
+app/storage/
+.env
diff --git a/.env.example b/.env.example
index d445610..9d6626d 100644
--- a/.env.example
+++ b/.env.example
@@ -1,32 +1,14 @@
-APP_ENV=local
-APP_KEY=
-APP_DEBUG=true
-APP_LOG_LEVEL=debug
+APP_ENV=production
+APP_KEY=base64:I8dXfAzV1sKdq5hSygF0kxduUOZjPYk7V2d7HtiTxik=
+APP_DEBUG=false
+APP_LOG_LEVEL=info
 APP_URL=http://localhost
 
-DB_CONNECTION=mysql
-DB_HOST=127.0.0.1
-DB_PORT=3306
-DB_DATABASE=homestead
-DB_USERNAME=homestead
-DB_PASSWORD=secret
+LOG_CHANNEL=stderr
 
-BROADCAST_DRIVER=log
-CACHE_DRIVER=file
-SESSION_DRIVER=file
-QUEUE_DRIVER=sync
-
-REDIS_HOST=127.0.0.1
-REDIS_PASSWORD=null
-REDIS_PORT=6379
+DB_CONNECTION=redis
 
-MAIL_DRIVER=smtp
-MAIL_HOST=mailtrap.io
-MAIL_PORT=2525
-MAIL_USERNAME=null
-MAIL_PASSWORD=null
-MAIL_ENCRYPTION=null
-
-PUSHER_APP_ID=
-PUSHER_KEY=
-PUSHER_SECRET=
+BROADCAST_DRIVER=log
+CACHE_DRIVER=redis
+SESSION_DRIVER=redis
+QUEUE_DRIVER=redis
diff --git a/.gitignore b/.gitignore
index e6066f6..c350f9c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,4 +6,5 @@ Homestead.json
 Homestead.yaml
 .env
 .phpstorm.meta.php
-_ide_helper.php
\ No newline at end of file
+_ide_helper.php
+laradock/
diff --git a/.travis.yml b/.travis.yml
new file mode 100644
index 0000000..5be03cf
--- /dev/null
+++ b/.travis.yml
@@ -0,0 +1,43 @@
+language: php
+
+php:
+  - "7.2"
+
+cache:
+  directories:
+    - "./vendor"
+
+dist: trusty
+
+before_script:
+  - composer install --no-interaction
+
+script:
+  - ./vendor/bin/phpunit
+  - docker build -t hshs-domxss-scanner .
+
+before_deploy:
+  - echo "$DOCKER_PASSWORD" | docker login -u "$DOCKER_USERNAME" --password-stdin
+
+deploy:
+  - provider: script
+    skip_cleanup: true
+    on:
+      branch: develop
+    script: >-
+      docker tag hshs-domxss-scanner siwecos/hshs-domxss-scanner:develop &&
+      docker push siwecos/hshs-domxss-scanner:develop
+  - provider: script
+    skip_cleanup: true
+    on:
+      branch: master
+    script: >-
+      docker tag hshs-domxss-scanner siwecos/hshs-domxss-scanner:latest &&
+      docker push siwecos/hshs-domxss-scanner:latest
+  - provider: script
+    skip_cleanup: true
+    on:
+      tags: true
+    script: >-
+      docker tag hshs-domxss-scanner siwecos/hshs-domxss-scanner:$TRAVIS_TAG &&
+      docker push siwecos/hshs-domxss-scanner:$TRAVIS_TAG
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..5871a3b
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,122 @@
+# Changelog
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
+and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [1.6.0] - 2019-05-07
+### Changed
+- Output format to new [defined standard](https://github.com/SIWECOS/siwecos-core-api/tree/develop#translatablemessage-object)
+- Docker base image to `siwecos/dockered-laravel:7.2`
+
+
+## [1.5.5] - 2019-04-10
+### Changed
+- Travis workflow
+
+## [1.5.4] - 2019-04-10
+### Changed
+- Translation string for ReferrerPolicy `DIRECTIVE_SET`
+
+## [1.5.3] - 2019-04-05
+### Fixed
+- Fixed typo
+
+## [1.5.2] - 2019-04-05
+### Fixed
+- Timeout issues
+- Crash when the `Set-Cookie` header was invalid
+
+## [1.5.1] - 2019-04-04
+### Added
+- Correct callback logic via Job implementation.
+- Feature to use a custom `userAgent`
+
+### Fixed
+- Several issues with DOMXSS part
+- Documentation
+- Deployment via Travis
+- Returning correct json responses
+- `TranslatableMessage` scheme
+- Minimized docker image
+
+## [1.3.1] - 2018-10-18
+### Fixed
+- Fixed Set-Cookie name
+
+### Changes
+- Updated README for Set-Cookie headers.
+
+
+## [1.3.0] - 2018-10-17
+### Added
+- Implemented SetCookieRating #32
+
+### Fixed
+- Fixed deprecation error in PHP 7.2
+- Fixed parent constructor call.
+- Fixed missing php dependency in Dockerfile
+
+
+## [1.2.1] - 2018-10-11
+### Fixed
+- Fixed deprecation error `INTL_IDNA_VARIANT_2003 is deprecated`. <br>
+[Further Information](https://bugs.php.net/bug.php?id=75609)
+
+
+## [1.2.0] - 2018-10-10
+### Fixed
+- Fixed #51
+
+### Added
+- Support for domains with umlauts
+
+### Changed
+- Upraded to Laravel 5.7
+- SpeedUp PHPUnit tests
+
+
+## [1.1.0] - 2018-10-01
+### Added
+- `Referrer-Policy` header rating
+
+
+## [1.0.2] - 2018-09-14
+### Fixed
+- Bugs in ContentTypeRating when only the `meta` tags are set.
+- Rating of sources and sinks with comments (#41).
+
+### Changed
+- Upgraded `voku/simple_html_dom` to actual version.
+
+
+## [1.0.1] - 2018-09-12
+### Fixed
+- Bugs in ContentTypeRating when only the `meta` tags are set.
+- Rating of sources and sinks with comments (#41).
+
+### Changed
+- Upgraded `voku/simple_html_dom` to actual version.
+
+
+## [1.0.0] - 2018-09-07
+### Added
+- CHANGELOG.md and semantic versioning
+
+[Unreleased]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.6.0..develop
+[1.6.0]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.5.5...1.6.0
+[1.5.5]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.5.4...1.5.5
+[1.5.4]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.5.3...1.5.4
+[1.5.3]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.5.2...1.5.3
+[1.5.2]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.5.1...1.5.2
+[1.5.1]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.3.1...1.5.1
+[1.3.1]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.3.0...1.3.1
+[1.3.0]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.2.0...1.3.0
+[1.2.1]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.2.0...1.2.1
+[1.2.0]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.1.0...1.2.0
+[1.1.0]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.0.2...1.1.0
+[1.0.2]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.0.1...1.0.2
+[1.0.1]: https://github.com/SIWECOS/HSHS-DOMXSS-Scanner/compare/1.0.0...1.0.1
+
diff --git a/DOMXSS.de.md b/DOMXSS.de.md
new file mode 100644
index 0000000..bb8abde
--- /dev/null
+++ b/DOMXSS.de.md
@@ -0,0 +1,112 @@
+
+# DOMXSS
+
+DOMXSS Scanner
+
+## SINKS
+
+### Headline
+
+Überprüfung des JavaScript-Codes nach DOMXSS-Sinks
+
+### Category
+
+JavaScript
+
+### Description
+
+Es wurde mindestens eine Codestelle beim Scan Ihrer Webseite gefunden, der unter bestimmten Voraussetzungen auf eine DOM-basierende [[Cross-Site Scripting|Cross-Site Scripting-Anfälligkeit]] hindeutet. Diese Stelle kann eine Schwachstelle auf Ihrer Webseite darstellen.
+
+### Background
+
+[[Cross-Site Scripting]] stellt eine Möglichkeit dar, den HTML-Code auf Ihrer Webseite zu manipulieren und zu infiltrieren. Es ermöglicht einem Angreifer, Skripte indirekt an den [[Browser]] Ihres Webseiten-Besuchers zu senden und damit Schadcode auf der Seite des Besuchers auszuführen.
+
+### Consequence
+
+[[Cross-Site Scripting]] ermöglicht es Kriminellen auf Ihrer Webseite Schadcode zu hinterlegen. Dieser Code kann Ihre Besucher oder Kunden infizieren und so möglicherweise massiven Schaden anrichten, z. B. wenn der Schadcode zur Installation eines [[Ransomware|Erpressungstrojaners]] in dessen Unternehmensnetzwerk führt. In diesem Fall könnten Sie für den Schaden haftbar gemacht werden. IT-Sicherheitsunternehmen könnten Sie in den Index von gefährlichen Webseiten aufnehmen und so Dritten den Zugriff auf Ihre Webseite aus Sicherheitsgründen verweigern. Die Information, dass Ihre Webseite Schadsoftware enthält/enthielt, ist auch viele Jahre nach dem Entfernen des Schadcodes bei Internet-Suchmaschinen ersichtlich. Eine Listung auf solch einer Blacklist kann zudem dazu führen, dass Sie auch keine [[Email|E-Mails]] mehr empfangen oder senden können, da Ihr gesamtes Netzwerk und die [[IP]] als Gefährdung anderer eingestuft wird.
+
+### Solution_Tips
+
+Wenn unsicherer JavaScript-Code gemeldet wird, ist die [[Webanwendung]] eventuell anfällig für sog. [[DOMXSS-Sinks|DOMXSS]]-Angriffe.
+Das Ergebnis der Untersuchung kann nur als Hinweis auf Sicherheitslücken verwendet werden. Weitere Tests sind erforderlich, um die [[Schwachstellen|Schwachstellen]] auf der Webseite zu bestätigen.
+
+### Link
+
+DOMXSS-Schwachstelle
+
+### Negative
+
+Unsicheren [[JavaScript]]-Code verwendet [[DOMXSS-Sinks]].
+
+### Positive
+
+Automatisiert wurden keine unsicheren Codebestandteile für [[DOMXSS-Sinks]] erkannt.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## SOURCES
+
+### Headline
+
+Überprüfung des JavaScript-Codes nach DOMXSS-Sources
+
+### Category
+
+JavaScript
+
+### Description
+
+Bei der Überprüfung wurde mindestens eine [[Schwachstellen|Schwachstelle]] auf der Webseite gefunden, die von einer externen, möglicherweise nicht vertrauenswürdigen Quelle gesteuert werden könnte.
+
+### Background
+
+Durch das Laden von Dateien und Codes aus unsicheren bzw. externen Quelle entsteht für Ihre Webseite eine potentielle Sicherheitslücke. Ein Angreifer, der die externe Quelle kontrolliert, könnte einen Schadcode hochladen, der dann auf Ihrer Seite ausgeführt werden kann.
+
+### Consequence
+
+[[Cross-Site Scripting]] ermöglicht es Kriminellen auf Ihrer Webseite Schadcode zu hinterlegen. Dieser Code kann Ihre Besucher oder Kunden infizieren und so möglicherweise massiven Schaden anrichten, z. B. wenn der Schadcode zur Installation eines [[Ransomware|Erpressungstrojaners]] in dessen Unternehmensnetzwerk führt. In diesem Fall könnten Sie für den Schaden haftbar gemacht werden. IT-Sicherheitsunternehmen könnten Sie in den Index von gefährlichen Webseiten aufnehmen und so Dritten den Zugriff auf Ihre Webseite aus Sicherheitsgründen verweigern. Die Information, dass Ihre Webseite Schadsoftware enthält/enthielt, ist auch viele Jahre nach dem Entfernen des Schadcodes bei Internet-Suchmaschinen ersichtlich. Eine Listung auf solch einer Blacklist kann zudem dazu führen, dass Sie auch keine [[Email|E-Mails]] mehr empfangen oder senden können, da Ihr gesamtes Netzwerk und die [[IP]] als Gefährdung anderer eingestuft wird.
+
+### Solution_Tips
+
+Wenn unsicherer JavaScript-Code gemeldet wird, ist die [[Webanwendung]] eventuell anfällig für sog. [[DOMXSS-Sinks|DOMXSS]]-Angriffe.
+Das Ergebnis der Untersuchung kann nur als Hinweis auf Sicherheitslücken verwendet werden. Weitere Tests sind erforderlich, um die [[Schwachstellen|Schwachstellen]] auf der Webseite zu bestätigen.
+
+### Link
+
+Schadcode-Ueber-Fremde-Quellen
+
+### Negative
+
+Unsicheren [[JavaScript]]-Code verwendet (Sources).
+
+### Positive
+
+Automatisiert wurden keine unsicheren Codebestandteile für [[DOMXSS-Sources]] erkannt.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## _RESULTS
+
+### NO_CONTENT
+
+Auf der Seite wurde kein Inhalt gefunden.
+
+### NO_SCRIPT_TAGS
+
+Der Scanner hat keine Skript-Inhalte zum Bewerten gefunden.
+
+### NO_SINKS_FOUND
+
+Es wurden keine „[[DOMXSS-Sinks]]“ gefunden.
+
+### NO_SOURCES_FOUND
+
+Es wurden keine „[[DOMXSS-Sources]]“ gefunden.
+
+### SINKS_FOUND
+
+Es wurden „[[DOMXSS-Sinks]]“ gefunden.
+
+### SOURCES_FOUND
+
+Es wurden „[[DOMXSS-Sources]]“ gefunden.
diff --git a/DOMXSS.en.md b/DOMXSS.en.md
new file mode 100644
index 0000000..9bdb41a
--- /dev/null
+++ b/DOMXSS.en.md
@@ -0,0 +1,112 @@
+
+# DOMXSS
+
+DOMXSS Scanner
+
+## SINKS
+
+### Headline
+
+Checking the JavaScript code for DOMXSS sinks
+
+### Category
+
+JavaScript
+
+### Description
+
+At least one code segment was found by scanning your website that may, under certain circumstances, indicate a DOM-based [https://en.wikipedia.org/wiki/Cross-site_scripting cross-site scripting vulnerability]. This segment can be a security flaw on your website.
+
+### Background
+
+[https://www.siwecos.de/wiki/Cross-Site_Scripting Cross-Site-Scripting] is a method of manipulating and infiltrating the HTML code on your website. It allows an attacker to send scripts indirectly to your visitor's browser and to execute malicious code on the side of the visitor.
+
+### Consequence
+
+[https://en.wikipedia.org/wiki/Cross-site_scripting Cross-site scripting] allows criminals to store malicious code on your website. This code can infect your visitors or customers and thus cause severe harm, for example if the malicious code leads to the installation of a [https://en.wikipedia.org/wiki/Ransomware ransomware] in their company's network. In this case you could be held liable for the damage. IT security companies could list you on their index of dangerous websites and thus prevent access to your website for security reasons. The information that your website contains/contained malicious code can still be found by search engines, even many years after the malicious code was removed. If your website is listed on such a blacklist, you may no longer be able to receive or send emails, because your entire network and the IP would be rated as a security risk to others.
+
+### Solution_Tips
+
+If unsafe JavaScript code was reported, the web application may be vulnerable to so-called DOMXSS attacks.
+The check result can only be taken as an indication of security flaws. Further tests are necessary to confirm that there are vulnerabilities on the website.
+
+### Link
+
+DOMXSS vulnerability
+
+### Negative
+
+Unsafe JavaScript code used (sinks).
+
+### Positive
+
+No unsafe code components for DOMXSS sinks were recognized in an automatic check.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## SOURCES
+
+### Headline
+
+Check of JavaScript code for DOMXSS sources
+
+### Category
+
+JavaScript
+
+### Description
+
+During the check, at least one vulnerability was found on the web page that could be controlled by an external, potentially untrustworthy source.
+
+### Background
+
+A potential vulnerability for your website is caused by loading files and code from unsafe or external sources. An attacker who controls the external source could upload malicious code which could then be executed on your web page.
+
+### Consequence
+
+[https://en.wikipedia.org/wiki/Cross-site_scripting Cross-site scripting] allows criminals to store malicious code on your website. This code can infect your visitors or customers and thus cause severe harm, for example if the malicious code leads to the installation of a [https://en.wikipedia.org/wiki/Ransomware ransomware] in their company's network. In this case you could be held liable for the damage. IT security companies could list you on their index of dangerous websites and thus prevent access to your website for security reasons. The information that your website contains/contained malicious code can still be found by search engines, even many years after the malicious code was removed. If your website is listed on such a blacklist, you may no longer be able to receive or send emails, because your entire network and the IP would be rated as a security risk to others.
+
+### Solution_Tips
+
+If unsafe JavaScript code was reported, the web application may be vulnerable to so-called DOMXSS attacks.
+The check result can only be taken as an indication of security flaws. Further tests are necessary to confirm that there are vulnerabilities on the website.
+
+### Link
+
+Malicious-Code-By-External-Sources
+
+### Negative
+
+Unsafe JavaScript code used (sources)
+
+### Positive
+
+No unsafe code components for DOMXSS sources were recognized in an automatic check.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## _RESULTS
+
+### NO_CONTENT
+
+The site was empty and there was nothing to scan for.
+
+### NO_SCRIPT_TAGS
+
+The scanner found no script tags to rate.
+
+### NO_SINKS_FOUND
+
+No "sinks" were found.
+
+### NO_SOURCES_FOUND
+
+No "sources" were found.
+
+### SINKS_FOUND
+
+"Sinks" were found.
+
+### SOURCES_FOUND
+
+"Sources" were found.
diff --git a/Docker/Caddyfile b/Docker/Caddyfile
new file mode 100644
index 0000000..7935013
--- /dev/null
+++ b/Docker/Caddyfile
@@ -0,0 +1,16 @@
+0.0.0.0
+
+root /scanner/public
+
+fastcgi / 127.0.0.1:9000 php {
+    index index.php
+}
+
+rewrite {
+    to {path} {path}/ /index.php?{query}
+}
+
+on startup php-fpm7
+
+log stdout
+errors stdout
diff --git a/Docker/supervisord.conf b/Docker/supervisord.conf
new file mode 100644
index 0000000..17e2916
--- /dev/null
+++ b/Docker/supervisord.conf
@@ -0,0 +1,32 @@
+[supervisord]
+nodaemon=true
+loglevel=info
+
+[program:caddy]
+command=/usr/bin/caddy --conf /etc/Caddyfile
+user=root
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+
+[program:redis]
+command=/usr/bin/redis-server
+user=root
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+
+[program:laravel-worker]
+process_name=%(program_name)s_%(process_num)02d
+directory=/scanner
+command=php artisan queue:work --sleep=3 --tries=3
+autostart=true
+autorestart=true
+user=root
+numprocs=8
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..fd111fd
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,13 @@
+FROM siwecos/dockered-laravel:7.2
+
+LABEL maintainer="Sascha Brendel <mail@lednerb.eu>"
+
+# Copy application
+COPY . .
+COPY .env.example .env
+
+# Install all PHP dependencies and change ownership of our applications
+RUN composer install --optimize-autoloader --no-dev --no-interaction \
+    && chown -R www-data:www-data .
+
+EXPOSE 80
diff --git a/HEADER.de.md b/HEADER.de.md
new file mode 100644
index 0000000..307b514
--- /dev/null
+++ b/HEADER.de.md
@@ -0,0 +1,648 @@
+
+# HEADER
+
+Header Scanner
+
+## CONTENT_SECURITY_POLICY
+
+### Headline
+
+Überprüfung der Content Security Policy (CSP)
+
+### Category
+
+Webserver
+
+### Description
+
+Die [[Content-Security-Policy]] ist eine strukturierte Vorgehensweise, welche das Injizieren und Ausführen von evtl. bösartigen Befehlen in einer [[Webanwendung]] ([[Injection|Injection-Angriffe]]) mildern soll. Es stellt über eine [[Whitelist]] dar, von welchen Quellen z. B. [[Javascript]], Bilder, Schriftarten und andere Inhalte auf Ihrer Seite eingebunden werden dürfen.
+
+### Background
+
+Content Security Policy (CSP) erfordert eine sorgfältige Abstimmung und genaue Definition des Sicherheitskonzeptes. Wenn diese Option aktiviert wurde, hat CSP erhebliche Auswirkungen auf die Art und Weise, wie der Browser die Seiten rendert (zusammensetzt). Zum Beispiel Inline [[JavaScript]] ist standardmäßig deaktiviert und muss explizit in der Policy erlaubt werden. Die CSP kann dazu beitragen, Code-Injection-Angriffe zu mildern.
+
+### Consequence
+
+Die Content-Security-Policy ist eine leistungsfähige Möglichkeit, die Sicherheit auf Webseiten zu erhöhen. Auf der anderen Seite ist es nur selten möglich, einen sicheren CSP-[[Header/DE|Header]] zu integrieren, ohne den Quellcode der Webseite zu modifizieren.
+
+### Solution_Tips
+
+Wenn die Content Security Policy nicht sicher konfiguriert ist, lädt Ihre [[Webanwendung]] eventuell Inhalte aus unsicheren Quellen nach.
+
+Verwenden Sie den CSP mit default-src 'none' oder 'self' und ohne 'unsafe-eval' oder 'unsafe-inline' Richtlinien. Mehr zu '''Content Security Policy''' (zu deutsch etwa "Richtlinie für die Sicherheit der Inhalte") finden Sie bei '''[https://wiki.selfhtml.org/wiki/Sicherheit/Content_Security_Policy SELFHTML >>]'''
+
+'''Beispiele für den [[Header/DE|Header]] der Startseite:'''
+
+ <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'">
+ <meta http-equiv="X-Content-Security-Policy" content="default-src 'self'; script-src 'self'">
+ <meta http-equiv="X-WebKit-CSP" content="default-src 'self'; script-src 'self'">
+
+'''Konfiguration des Webservers'''
+
+Wenn man seinen eigenen Webserver konfigurieren kann, was bei günstigen Hostingangeboten in aller Regel nicht der Fall ist, dann gibt es diese Einstellungsmöglichkeit über die '''Bearbeitung der .htaccess''':
+
+ # Download: Lade Inhalte nur von Seiten, die explizit erlaubt sind
+ # Beispiel: Alles von der eigenen Domain erlauben, keine Externas:
+
+ Header set Content-Security-Policy "default-src 'none'; frame-src 'self'; font-src 'self';img-src 'self' siwecos.de; object-src   'self'; script-src 'self'; style-src 'self';"
+
+Hier finden Sie ein Beispiel, wie eine .htaccess-Datei aussehen kann, um einen höheren Wert beim '''Header Scanner''' zu erzielen.
+([[Htaccess/DE|.htaccess-Beispiel]])
+
+### Link
+
+Content-Security-Policy-Schwachstelle
+
+### Negative
+
+Content Security Policy unsicher
+
+### Positive
+
+Eine sichere Konfiguration der Content Security Policy ([[Content-Security-Policy-Schwachstelle/DE/Background|CSP]]) wurde gefunden.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## CONTENT_TYPE
+
+### Headline
+
+Überprüfung des HTTP Content-Types
+
+### Category
+
+Webserver
+
+### Description
+
+Der Content-Type ist eine Angabe, die für gewöhnlich im Kopfbereich der Webseite, dem sogenannten [[Header/DE|Header]], untergebracht wird. Durch diese Angaben wird der Zeichensatz und der Typ des Inhalts der Seite definiert. Sollte eine Definition fehlen, wird der [[Browser]] versuchen, den Content-Type zu erraten; dies kann zu [[Schwachstellen|Sicherheitslücken]] wie [[Sniffer|Code-Page-Sniffing]] führen. Diese Angaben sind zudem wichtig, damit die Webseite in jedem [[Browser]] und auf jedem Computer einwandfrei dargestellt wird. Wenn ein Server ein Dokument an einen [https://de.wikipedia.org/wiki/User_Agent User-Agent] sendet (zum Beispiel zum [[Browser]]) ist es nützlich, im Content-Type-Feld des HTTP-Headers die Art des Dateiformates zu hinterlegen. Diese Informationen deklarieren den [https://de.wikipedia.org/wiki/Internet_Media_Type MIME-Typ] und senden entsprechend die Zeichenkodierung des Dokuments wie text/html, text/plain, etc. an den Browser.
+
+### Background
+
+Der Content-Type ist eine [https://de.wikipedia.org/wiki/Meta-Element Meta-Element-Angabe], die im Kopfbereich der Website, dem sogenannten [[Header/DE|Header]] untergebracht wird. Durch diese Angabe wird der Zeichensatz und der Typ des Inhalts der Seite definiert. Diese Angaben sind wichtig, damit die Website in jedem Browser und auf jedem Computer einwandfrei dargestellt wird. Die Einbettung des Content-Types im Quellcode ist durch eine relativ kurze Angabe möglich. Es sollte der [[UTF-8]] Zeichensatz verwendet werden.
+
+### Consequence
+
+Durch die Angabe der korrekten [[Header/DE|Header]]-Deklaration können diverse [[Cross-Site Scripting|XSS-Angriffe]] verhindert werden. Wird der verwendete [https://de.wikipedia.org/wiki/Zeichenkodierung Zeichensatz] nicht angegeben, so interpretieren manche [[Browser|Webbrowser]] den Quellcode selbst, wodurch bestimmte Angriffe möglich werden, die einen anderen Zeichensatz voraussetzen.
+
+### Solution_Tips
+
+Wenn die [[Content-Type-Nicht-Korrekt/DE|Content-Type-Angabe]] nicht korrekt konfiguriert ist, sind Angriffe auf Ihre Webseite wahrscheinlich möglich.
+
+Fügen Sie den entsprechenden HTTP-[[Header/DE|Header]] oder alternativ ein <meta> Tag hinzu. Bitte beachten Sie, dass <meta> im Gegensatz zu einem HTTP-[[Header/DE|Header]] leichter umgangen werden kann.
+
+'''text/html; charset=utf-8''';
+
+ <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+
+Weiterhin muss der Server selber konfiguriert werden, damit die '''richtige charset-Information''' gesendet wird. Dazu werden entsprechende Berechtigungen benötigt, um die Änderungen am Server durchführen zu können. Weitere Informationen zu den verschiedenen Serverkonfigurationen finden Sie auf den Seiten von [https://www.w3.org/International/articles/http-charset/index.de W3.org].
+
+Darüber hinaus gibt es auch die Möglichkeit die '''richtige charset-Information''' der [http://httpd.apache.org/docs/2.0/howto/htaccess.html '''.htaccess'''] zu übergeben, welche die Angaben im HTTP-[[Header/DE|Header]] überschreiben. [https://www.w3.org/International/questions/qa-htaccess-charset charset in .htaccess]
+
+'''In die .htaccess eintragen:'''
+ AddType 'text/html; charset=UTF-8' html
+
+Hier finden Sie ein Beispiel, wie eine .htaccess-Datei aussehen kann, um einen höheren Wert beim '''Header Scanner''' zu erzielen.
+([[Htaccess/DE|.htaccess-Beispiel]])
+
+### Link
+
+Content-Type-Nicht-Korrekt
+
+### Negative
+
+Inkorrekte HTTP Content-Type Konfiguration
+
+### Positive
+
+Die [[Content-Type-Nicht-Korrekt/DE/Background|Content Type Angabe]] ist korrekt konfiguriert.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## PUBLIC_KEY_PINS
+
+### Headline
+
+Überprüfung des Public Key Pinning (HPKP) - hat keinen Einfluß auf die Bewertung
+
+### Category
+
+Webserver
+
+### Description
+
+Mächtige Angreifer wie bspw. Geheimdienste können ggf. eine [[Digitale_Signatur|Signatur]] mit der Hilfe einer von den Benutzern akzeptierten [[Zertifizierungsstelle]] erstellen lassen. Um dies zu verhindern, kann eine Webseite definieren, dass beim ersten Aufruf des [[Zertifikate|Zertifikats]] das Zertifikat dauerhaft gespeichert wird (pinning). Mit der Hilfe von [[HTTP_Public_Key_Pinning|Key-Pinning]] wird für die von der Webseite definierten Zeit lediglich das gespeicherte [[Zertifikate|Zertifikat]] akzeptiert.
+
+### Background
+
+Einer der für Laien am schwierigsten zu konfigurierende [[Header/DE|Header]]. Besitzt man ein [[Zertifikate|SSL-Zertifikat]] kann man dem anfragenden [[Browser]] mitteilen, wie lange dieses noch gilt und einen “Schlüssel” = eine eindeutige Kennung senden. Damit kann beim erneuten Aufruf festgestellt werden, ob das [[Zertifikate|Zertifikat]] noch das zuvor angegebene [[Zertifikate|Zertifikat]] ist. Sollte ein Angreifer nun versuchen, ein gefälschtes [[Zertifikate|Zertifikat]] dem Nutzer zu unterbreiten, so wird der [[Browser|Webbrowser]] keine Daten senden und keine Informationen darstellen. Weitere Infos zu Public Key Pinning [[HTTP_Public_Key_Pinning|Public Key Pinning (HPKP)]].
+
+### Consequence
+
+Für kleine und mittelständische Unternehmen, die Zielgruppe von SIWECOS, ist dieser [[Header/DE|Header]] zwar einsetzbar, aber kein absolutes Muss. Wird dieser Header falsch konfiguriert, steht Ihre Website für die Benutzer unter Umständen für einen langen Zeitraum nicht zur Verfügung, und zwar solange bis die korrekten [[Zertifikate|Zertifikate]] verwendet werden oder das Ablaufdatum des zuvor gesendeten Headers erreicht ist.
+
+### Solution_Tips
+
+Das Setzen des [[Public-Key-Pins-Deaktiviert/DE|Public Key Pinning]] (HPKP) ist kein absolutes Muss und wird aktuell im Siwecos-Scanner nicht gewertet. Es ist ratsam, diese nicht oder nur nach Absprache mit einem Experten zu aktivieren.
+
+Die [[Browser]] Mozilla, Firefox und Google Chrome richten sich nach dem [https://de.wikipedia.org/wiki/HTTP_Public_Key_Pinning RFC-7469-Standard] und ignorieren daher HPKP-[[Header/DE|Header]]. Wenn nur ein einziger Pin gesetzt ist, wird eine Fehlermeldung angezeigt. Damit die Pin-Validierung funktioniert, ist es also immer notwendig mindestens zwei gültige Public Keys bzw. einen Backup-Pin anzugeben. Interessierte sollten sich dazu an einen IT-Sicherheitsexperten oder Webentwickler wenden.
+
+Weiterführende Informationen finden Sie im [https://www.zdnet.com/article/google-chrome-is-backing-away-from-public-key-pinning-and-heres-why/ Artikel von ZDNET]
+
+'''HPKP aktivieren''' - Dieses Feature kann einfach aktiviert werden, indem ein Public-Key-Pins HTTP-[[Header/DE|Header]] beim Aufruf der Seite über [[HTTPS]] zurückgegeben wird. ([https://developer.mozilla.org/de/docs/Web/Security/Public_Key_Pinning Weitere Infos]).
+
+ Public-Key-Pins: pin-sha256="base64=="; max-age=expireTime [; includeSubdomains][; report-uri="reportURI"]
+
+Hier finden Sie ein Beispiel, wie eine .htaccess-Datei aussehen kann, um einen höheren Wert beim '''Header Scanner''' zu erzielen.
+([[Htaccess/DE|.htaccess-Beispiel]])
+<!--pin-sha256="<HASH>"; pin-sha256="<HASH>"; max-age=2592000; includeSubDomains;-->
+
+### Link
+
+Public-Key-Pins-Deaktiviert
+
+### Negative
+
+[[Public-Key-Pins-Deaktiviert/DE/Background|Public-Key-Pinning]] nicht vorhanden (Das Ergebnis fließt nicht in die Bewertung ein).
+
+### Positive
+
+[[Public-Key-Pins-Deaktiviert/DE|Public-Key-Pinning]] ist aktiviert (HPKP wird derzeit nicht überprüft).
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## REFERRER_POLICY
+
+### Headline
+
+Überprüfung der Referrer Policy
+
+### Category
+
+Webserver
+
+### Description
+
+Eine gut gesetzte Referrer Policy '''schützt die Privatsphäre''' Ihrer Webseiten-Besucher, hat aber keinen ''direkten'' Einfluss auf die Sicherheit Ihrer Webseite.
+
+### Background
+
+Eine gut gesetzte Referrer Policy '''schützt die Privatsphäre''' Ihrer Webseiten-Besucher.
+
+### Consequence
+
+Eine fehlende oder falsch gesetzte Referrer Policy ermöglicht unerwünschten benutzeridentifizierenden Informationensabfluss.
+
+### Solution_Tips
+
+Mit dem Eintrag '''Referrer Policy''' im [[Header/DE|Header]] wird geregelt, welche der Referrer-Informationen, die im ''Referer Header'' gesendet wurden, in Anfragen aufgenommen werden sollen und welche nicht. Es gibt sehr viele verschiedene Optionen, die gesetzt werden können. Neben Firefox unterstützen Chrome und Opera bereits einige Optionen dieses Header-Eintrages. Aktuell handelt es sich bei diesen Header-Einträgen um einen [https://www.w3.org/TR/referrer-policy/ Empfehlungskandidaten des W3C vom 26.01.2017]. In dem zuvor verlinkten Dokument werden die einzelnen Möglichkeiten genau beschrieben.
+
+'''Anmerkung zur Schreibweise:''' Die korrekte englische Schreibweise lautet '''Referrer'''. Der ursprüngliche RFC ([https://tools.ietf.org/html/rfc2068#section-14.37 RFC 2068]) enthielt jedoch versehentlich die falsche Schreibweise ''Referer'' und erhebt diesen Wortlaut damit zum Standard innerhalb von HTTP. In anderen Standards wie im DOM wird die korrekte Schreibweise verwendet. Der Webbrowser setzt, wenn ein Referrer gesetzt ist, einen eigenen Header ein, der heißt dann z. B. `Referer: google.com`. Dort ist dann Referrer falsch geschrieben, aber laut Standard richtig.
+
+Wir empfehlen die Einstellung des Referrer Policy Headers so restriktiv wie möglich zu gestalten, also z. B. "no-referrer" zu setzen.
+
+== Beispiele ==
+
+'''Referrer Policy Definition durch Server Header:'''
+ # Referrer Policy
+ Header set Referrer-Policy "no-referrer"
+
+'''Referrer Policy Definition durch HTML-Code:'''
+ <meta name="referrer" content="no-referrer" />
+
+'''Anweisung:''' Der Wert `'''no-referrer'''` weist den Browser an, '''niemals''' ''Referer Header'' zu senden, die von Ihrer Site gestellt werden. Dazu gehören auch Links zu Seiten Ihrer eigenen Webseite.
+
+{| class="wikitable" style="margin:auto;"
+|- style="border: 4px solid #C31622; color:#000000; background-color:#f6f6f6;"
+|
+Weitere nützliche Anweisungen können `'''same-origin'''`, `'''strict-origin'''` oder `'''origin-when-cross-origin'''` sein.
+|}
+
+Der Wert `'''same-origin'''` weist den Browser an, nur ''Referer Header'' zu senden, die von Ihrer Webseite gestellt werden. Wenn das Ziel eine andere [[Domain]] ist, werden keine Referrer-Informationen gesendet.
+
+Der Wert `'''strict-origin'''` weist den Browser an, als ''Referer Header'' immer die Ursprungs-Domain anzugeben.
+
+Der Wert `'''origin-when-cross-origin'''` weist den Browser an, nur dann die vollständige Referrer-URL zu senden, wenn Sie auf der selben [[Domain]] bleiben. Sobald die Domain über [[HTTPS]] verlassen wird oder eine anderer [[Domain]] angesprochen wird, wird nur die Quell-Domain gesendet.
+
+Detaillierte Informationen und Beispiele (English) finden Sie bei [https://scotthelme.co.uk/a-new-security-header-referrer-policy/ Scott Helme].
+
+### Link
+
+Referrer-Policy
+
+### Negative
+
+Referrer Policy unsicher
+
+### Positive
+
+Referrer Policy sicher
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## SET_COOKIE
+
+### Headline
+
+Überprüfung von Set-Cookie
+
+### Category
+
+Webserver
+
+### Description
+
+Cookies sollten durch das Setzen des HttpOnly und Secure flags gesichert werden um zu verhindern, dass Dritte die Informationen abgreifen oder verändern können.
+
+### Background
+
+Überprüft ob Flags zur Cookie Sicherheit gesetzt sind.
+
+### Consequence
+
+Wenn Cookies nicht abgesichert werden, können sie über einen [[Man-in-the-middle]]-Angriff verändert oder abgegriffen werden.
+
+### Solution_Tips
+
+`httpOnly`-Flag setzen, damit das Cookie nicht über [[Javascript|JavaScript]] ausgelesen werden kann. Damit schützen Sie die Session-Informationen vor Auslesen und Diebstahl, denn wer das Cookie hat gilt als [[Authentifizierung|authentifiziert]].
+`secure`-Flag setzen, damit das Cookie nicht über unverschlüsselte Verbindungen [[HTTP]] gesendet wird, sondern ausschließlich über [[HTTPS]].
+
+### Link
+
+Set-Cookie
+
+### Negative
+
+Cookies sind nicht gesichert.
+
+### Positive
+
+Cookies sind gesichert.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## STRICT_TRANSPORT_SECURITY
+
+### Headline
+
+Überprüfung des HSTS Schutzes
+
+### Category
+
+Webserver
+
+### Description
+
+Strict-Transport-Security ([[HTTP_Strict_Transport_Security|HSTS]]) stellt sicher, dass die Webseite für eine bestimmte Zeit lediglich über [[HTTPS]] gesicherte Verbindung aufgerufen werden kann. Der Webseitenbetreiber kann diesbezüglich u. a. definieren, wie lange der Zeitinterval ist und ob diese Regelung auch für [[Domain|Subdomains]] gelten soll.
+
+### Background
+
+Der [[HTTP_Strict_Transport_Security|HSTS]] Schutz ist inaktiv, die Kommunikation zwischen Ihrer Webseite und den Besuchern kann abgehört und manipuliert werden.
+
+### Consequence
+
+Aktuell ist Ihre Website nicht gegen Nutzung eines älteren [[SSL|TLS-Standards]] (Protokoll-Downgrade-Angriffe) und Cookie-Hijacking geschützt. Dies ermöglicht Angreifern die Kommunikation Ihrer Benutzer abzuhören und diese zu manipulieren. Mit Hilfe dieser Informationen könnte ein Angreifer weitere Attacken starten oder Ihren Nutzern ungewünschte Werbung und Schadcode zusenden. Die [[HTTP_Strict_Transport_Security|HTTP-Strict-Transport-Sicherheit]] ist eine hervorragende Funktion zur Unterstützung Ihrer Seite und stärkt Ihre Implementierung von [[SSL|TLS]], indem der Benutzeragent die Verwendung von [[HTTPS]] erzwingt.
+
+### Solution_Tips
+
+Wenn die Verbindung zu Ihrer Seite ist nicht verschlüsselt ist, kann sämtliche Kommunikation zwischen Ihrer Seite und den Benutzern abgehört und manipuliert werden.
+
+max-age=63072000; includeSubdomains;
+HTTP Strict Transport Security (HSTS) ist ein einfach zu integrierender Web-Security-Policy-Mechanismus.
+
+ # HTTP Strict Transport Security (HSTS) aktivieren
+ # Pflichtangabe: "max-age"
+ # Optional: "includeSubDomains"</pre>
+ '''Header set Strict-Transport-Security "max-age=31556926; includeSubDomains"'''
+
+Hier finden Sie ein Beispiel, wie eine .htaccess-Datei aussehen kann, um einen höheren Wert beim '''Header Scanner''' zu erzielen.
+([[Htaccess/DE|.htaccess-Beispiel]])
+
+### Link
+
+Keine-Verschluesselung-Gefunden
+
+### Negative
+
+HSTS Schutz Fehler
+
+### Positive
+
+Ihre Webseite ist ausschließlich über das sichere [[HTTPS|HTTPS-Protokoll]] erreichbar. Kommunikation zwischen Ihrer Webseite und den Besuchern kann nicht abgehört und manipuliert werden.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## X_CONTENT_TYPE_OPTIONS
+
+### Headline
+
+Überprüfung des X-Content-Type Headers
+
+### Category
+
+Webserver
+
+### Description
+
+Die [[X-Content-Type-Options-Schwachstelle/DE/Background|X-Content-Type-Options]] Einstellungen im [[Header/DE|Header]] verhindern, dass der [[Browser]] Dateien als etwas anderes interpretiert, als vom Inhaltstyp im [[HTTP|HTTP]]-[[Header/DE|Header]] deklariert wurde. Die Headereinstellungen sind hier nicht gesetzt.
+
+### Background
+
+Es existiert nur ein definierbarer Wert '''nosniff''', dieser verhindert, dass der Internet Explorer und Google Chrome unabhängig vom deklarierten Content-Type (z. B. text/html) nach weiteren möglichen MIME-Types suchen. Für Chrome gilt dies auch für das Herunterladen von Erweiterungen. Der [[Header/DE|Headereintrag]] reduziert die Belastung durch sog. [[Drive-by-Download|Drive-by-Download-Attacken]]. Webseiten, die den Upload von Dateien unterstützen und die, wenn deren Namen geschickt gewählt wurden, vom [[Browser]] als ausführbare Datei oder dynamische [[HTML|HTML-Datei]] behandelt werden, könnten damit Ihren Rechner oder andere mit Schadcode infizieren. Weitere Informationen zu '''X-Content-Type-Options''' finden Sie im Bericht von [https://www.golem.de/news/cross-site-scripting-javascript-code-in-bilder-einbetten-1411-110264-2.html Golem.de].
+
+### Consequence
+
+Einfach und ohne weitere Anpassungen zu implementieren. Verhindert Angriffe auf Nutzer des Internet Explorers.
+
+### Solution_Tips
+
+nosniff;
+
+'''Beispielcode einer .htaccess auf einem Apache Webserver'''
+
+ <IfModule mod_headers.c>
+   # prevent mime based attacks like drive-by download attacks, IE and Chrome
+   '''Header set X-Content-Type-Options "nosniff"'''
+ </IfModule>
+
+Hier finden Sie ein Beispiel, wie eine .htaccess-Datei aussehen kann, um einen höheren Wert beim '''Header Scanner''' zu erzielen.
+([[Htaccess/DE|.htaccess-Beispiel]])
+
+### Link
+
+X-Content-Type-Options-Schwachstelle
+
+### Negative
+
+X-Content-Type [[Header/DE|Header]] fehlt.
+
+### Positive
+
+Der [[Header/DE|HTTP-Header]] ist korrekt gesetzt.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## X_FRAME_OPTIONS
+
+### Headline
+
+Überprüfung der HTTP-Header X-Frame Optionen
+
+### Category
+
+Webserver
+
+### Description
+
+Das Setzen von '''X-Frame-Options''' hilft dabei, Angriffe über [[Framing-Mechanismen|Framing-Mechanismen]] zu unterbinden. Dies gewährleistet bspw., dass [[Clickjacking]]-Angriffe größtenteils gemildert werden können. Darüber hinaus werden [[Downgrading_Angriffe|Downgrading-Angriffe]] wie etwa im Internet Explorer minimiert.
+
+### Background
+
+Ob einem [[Browser]] erlaubt wird, eine Seite in einem ''frame'' oder ''iframe'' darzustellen, legt dieser [[Header/DE|Headereintrag]] fest. Damit können sog. [[Clickjacking|Clickjacking-Attacken]] vermieden werde, indem sichergestellt wird, dass die Webseite nicht in einer anderen Webseite eingebettet wird. Es gibt verschiedene Werte:
+<poem>
+'''DENY:''' Kein Rendering der Seite, wenn sie in einem ''frame'' oder ''iframe'' geladen wird.
+'''SAMEORIGIN:''' Rendering der Seite erfolgt nur, wenn der ''frame'' oder ''iframe'' innerhalb Ihrer Domain ist.
+'''ALLOW-FROM DOMAIN:''' Wird hierbei explizit eine Domain angegeben, werden keine anderen Inhalte von unbekannten Sourcen gerendert bzw. dargestellt.
+</poem>
+
+### Consequence
+
+Verhindert z. B. [[Clickjacking]]-Angriffe. Einfach zu implementieren und keine weiteren Anpassungen auf der Website erforderlich.
+
+### Solution_Tips
+
+Wenn gemeldet wurde, dass im [[Header/DE|HTTP-Header]] die X-Frame Optionen nicht gesetzt sind, ist Ihre Webseite nicht ausreichend gegen [[Clickjacking|Clickjacking-Angriffe]] geschützt.
+
+Im [[Header/DE|HTTP-Header]] X-Frame Optionen entsprechend den Bedürfnissen setzen. Die '''X-Frame-Options''' im [[HTTP]] Header kann verwendet werden, um zu bestimmen, ob ein aufrufender [[Browser]] die Zielseite in einem <frame>, <iframe> oder bspw. <object> rendern bzw. einbetten darf. Webseiten können diesen Header verwenden, um u. a. [[Clickjacking|Clickjacking-Angriffe]] abzuwehren, indem sie unterbinden, dass ihr Content in fremden Seiten eingebettet wird.
+
+Mit dem HTTP-Header Befehl '''X-Frame-Options''' können moderne Webbrowser angewiesen werden, eine Seite nicht in einem Frame auf einer andere Website zu laden. Dafür muss der folgende Befehl in der htaccess-Datei gesetzt werden:
+
+Header always append X-Frame-Options DENY
+
+ Header always append X-Frame-Options DENY
+
+Alternativ kann erlaubt werden, dass die Seite nur auf anderen Seiten der gleichen Domain eingebunden werden dürfen:
+
+ Header always append X-Frame-Options SAMEORIGIN
+
+Falls eine Website doch extern eingebunden werden muss, kann eine Domain angegeben werden:
+
+ Header always append X-Frame-Options ALLOW-FROM botfrei.de
+
+Hier finden Sie ein Beispiel, wie eine .htaccess-Datei aussehen kann, um einen höheren Wert beim '''Header Scanner''' zu erzielen.
+([[Htaccess/DE|.htaccess-Beispiel]])
+
+### Link
+
+X-Frame-Options-Schwachstelle
+
+### Negative
+
+HTTP-[[Header/DE|Header]] X-Frame Optionen nicht gesetzt.
+
+### Positive
+
+Der [[Header/DE|Header]] ist korrekt gesetzt und verbessert den Schutz gegen Framing-Angriffe wie beispielsweise UI-Redressing bzw. Clickjacking.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## X_XSS_PROTECTION
+
+### Headline
+
+Überprüfung des X-XSS-Protection Headers
+
+### Category
+
+Webserver
+
+### Description
+
+Der [[Header/DE|HTTP-Header]] X-XSS-Protection definiert wie in [[Browser|Browsern]] eingebaute XSS-Filter konfiguriert werden. Eine Default-Installation kann eine unzureichende Konfiguration offenbaren.
+
+### Background
+
+Dieser [[Header/DE|Header]] aktiviert den in den meisten aktuellen [[Browser|Browsern]] (Internet Explorer, Chrome und Safari) eingebauten [[Cross-Site Scripting|Cross-Site Scripting-Schutz]] ([[XSS-Schwachstelle/DE|XSS]]). Zwar ist der Schutz standardmäßig aktiviert - daher ist dieser Header nur dazu da, den Filter ggfs. wieder zu aktivieren, falls der Benutzer ihn abgeschaltet hat. Zudem wird dieser Header nur ab dem IE 8+, Opera, Chrome und Safari unterstützt.
+
+### Consequence
+
+Verhindert reflektierte [[Cross-Site Scripting|XSS-Angriffe]]. Einfach zu implementieren und erfordert keine weiteren Anpassungen auf der Website.
+
+### Solution_Tips
+
+Wenn gemeldet wurde, dass Ihre Webseite wahrscheinlich nicht ausreichend gegen [[Cross-Site Scripting|XSS-Angriffe]] geschützt ist:
+
+ 1; mode=block
+
+'''Beispielcode einer .htaccess auf einem Apache Webserver'''
+
+  # Turn on XSS prevention tools, activated by default in IE and Chrome
+  '''Header set X-XSS-Protection "1; mode=block"'''
+
+Hier finden Sie ein Beispiel, wie eine .htaccess-Datei aussehen kann, um einen höheren Wert beim '''Header Scanner''' zu erzielen.
+([[Htaccess/DE|.htaccess-Beispiel]])
+
+### Link
+
+XSS-Schwachstelle
+
+### Negative
+
+Der [[Cross-Site Scripting|Cross-Site Scripting-Schutz]] ([[XSS-Schwachstelle/DE|XSS]]) ist nicht aktiviert oder unzureichend konfiguriert.
+
+### Positive
+
+Der [[Cross-Site Scripting|Cross-Site Scripting-Schutz]] ([[XSS-Schwachstelle/DE|XSS]]) des [[Browser|Webbrowsers]] ist auf Ihrer Seite aktiviert.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## _RESULTS
+
+### CSP_CORRECT
+
+Der [[Header/DE|Header]] ist korrekt gesetzt und entspricht den Empfehlungen.
+
+### CSP_DEFAULT_SRC_MISSING
+
+Die Anweisung default-src fehlt.
+
+### CSP_LEGACY_HEADER_SET
+
+Der veraltete [[Header/DE|Header]] '':HEADER_NAME'' ist gesetzt. Der neue standardisierte [[Header/DE|Header]] ist ''Content-Security-Policy''.
+
+### CSP_NO_UNSAFE_INCLUDED
+
+Die Content-Security-Policy-Schwachstelle (CSP) enthält keine unsicheren (unsafe) Direktiven, ist möglicherweise jedoch nicht sicher eingestellt.
+
+### CSP_UNSAFE_INCLUDED
+
+Der [[Header/DE|Header]] ist unsicher gesetzt, da er `unsafe-inline`- oder `unsafe-eval`-Direktiven enthält.
+
+### CT_CORRECT
+
+Der [[Header/DE|Header]] ist korrekt gesetzt und entspricht den Empfehlungen.
+
+### CT_HEADER_WITHOUT_CHARSET
+
+Der [[Header/DE|Header]] ist ohne Zeichensatzangabe gesetzt und dadurch nicht sicher.
+
+### CT_HEADER_WITH_CHARSET
+
+Der [[Header/DE|Header]] ist korrekt gesetzt und beinhaltet eine Zeichensatz-Angabe.
+
+### CT_META_TAG_SET
+
+Der [[Header/DE|Header]] ist korrekt gesetzt und enthält jedoch keine Zeichensatz-Angabe oder folgt nicht den Empfehlungen. Gefunden wurde ":META".
+
+### CT_META_TAG_SET_CORRECT
+
+Die Angabe ":META" im HTML-[[Header/DE|Header]] ist korrekt gesetzt.
+
+### CT_WRONG_CHARSET
+
+Ein falscher oder ungültiger Zeichensatz wurde eingetragen. Die Konfiguration ist nicht sicher.
+
+### DIRECTIVE_SET
+
+Die Anweisung ':DIRECTIVE' ist gesetzt.
+
+### EMPTY_DIRECTIVE
+
+Die Anweisung ist ausdrücklich als leer gekennzeichnet.
+
+### HEADER_ENCODING_ERROR
+
+Der [[Header/DE|Header]] ''':HEADER_NAME''' enthält [[Ersetzungszeichen|nicht-verarbeitbare]] Zeichen.
+
+### HEADER_NOT_SET
+
+Der [[Header/DE|Header]] ist nicht gesetzt.
+
+### HEADER_SET_MULTIPLE_TIMES
+
+Der [[Header/DE|Header]] wurde mehrmals gesetzt.
+
+### HPKP_LESS_15
+
+Die [[Verschlüsselung|öffentlichen Schlüssel]] sind für weniger als 15 Tage [[HTTP_Public_Key_Pinning|gepinnt]].
+
+### HPKP_MORE_15
+
+Die [[Verschlüsselung|Schlüssel]] sind für mehr als 15 Tage [[HTTP_Public_Key_Pinning|gepinnt]].
+
+### HPKP_REPORT_URI
+
+Eine `report-uri` ist gesetzt.
+
+### HSTS_LESS_6
+
+Der Wert von `max-age` ist kleiner als 6 Monate.
+
+### HSTS_MORE_6
+
+Der Wert von `max-age` ist größer als 6 Monate.
+
+### HSTS_PRELOAD
+
+Die `preload`-Direktive ist gesetzt.
+
+### HTTPONLY_FLAG_SET
+
+Das HttpOnly Flag ist gesetzt.
+
+### INCLUDE_SUBDOMAINS
+
+`includeSubDomains` ist gesetzt.
+
+### INVALID_HEADER
+
+Die folgenden Elemente Ihres [[Header/DE|Headers]] sind ungültig:
+:HEADER
+
+### MAX_AGE_ERROR
+
+Es trat ein Fehler beim Überprüfen der `max-age`-Angabe auf.
+
+### NO_HTTPONLY_FLAG_SET
+
+Das HttpOnly Flag ist nicht gesetzt.
+
+### NO_HTTP_RESPONSE
+
+Die angegebene [[URL]] lieferte keine Antwort.
+
+### NO_SECURE_FLAG_SET
+
+Das Secure Flag ist nicht gesetzt.
+
+### SECURE_FLAG_SET
+
+Das Secure Flag ist gesetzt.
+
+### WRONG_DIRECTIVE_SET
+
+Eine falsche oder unbekannte Anweisung ist gesetzt.
+
+### XCTO_CORRECT
+
+Der [[Header/DE|Header]] ist korrekt gesetzt und entspricht den Empfehlungen.
+
+### XCTO_NOT_CORRECT
+
+Der [[Header/DE|Header]] ist nicht korrekt gesetzt.
+
+### XFO_CORRECT
+
+Der [[Header/DE|Header]] ist korrekt gesetzt und entspricht den Empfehlungen.
+
+### XFO_WILDCARDS
+
+Der [[Header/DE|Header]] enthält Wildcard-Angaben (*) und ist daher nicht sicher konfiguriert.
+
+### XXSS_BLOCK
+
+Die `mode=block`-Direktive ist aktiviert.
+
+### XXSS_CORRECT
+
+Der [[Header/DE|Header]] ist korrekt gesetzt und entspricht den Empfehlungen.
diff --git a/HEADER.en.md b/HEADER.en.md
new file mode 100644
index 0000000..39506f6
--- /dev/null
+++ b/HEADER.en.md
@@ -0,0 +1,649 @@
+
+# HEADER
+
+Header Scanner
+
+## CONTENT_SECURITY_POLICY
+
+### Headline
+
+Check of the Content Security Policy (CSP)
+
+### Category
+
+Webserver
+
+### Description
+
+The [https://en.wikipedia.org/wiki/Content_Security_Policy Content Security Policy (CSP)] is a security concept that is designed to reduce the risk of injection and execution of malicious commands in a web application (content injection attacks). By means of a whitelist (list of allowed sources), it determines from which sources Javascript code, images, fonts, and other content may be integrated into your site.
+
+### Background
+
+[https://en.wikipedia.org/wiki/Content_Security_Policy Content Security Policy (CSP)] requires careful coordination and precise definition of the security concept. When this option is enabled, CSP has a significant impact on the way the browser renders (composes) the pages. For example, inline [[JavaScript]] is disabled by default and must be explicitly allowed in the policy. The CSP can help mitigate code injection attacks.
+
+### Consequence
+
+The Content Security Policy is a powerful way to increase the security on web pages. On the other hand, it is rarely possible to integrate a secure CSP [[Header/EN|header]] without modifying the source code of the web page.
+
+### Solution_Tips
+
+If the Content Security Policy is not configured securely, your web application may load content from insecure sources.
+
+Use the CSP with default-src 'none' or 'self' and without unsafe-eval or unsafe-inline directives. For more information about '''Content Security Policy''', please refer to '''[https://wiki.selfhtml.org/wiki/Sicherheit/Content_Security_Policy SELFHTML>>]'''
+
+'''Example for the [[Header/EN|header]] on the start page:'''
+
+ <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'">
+ <meta http-equiv="X-Content-Security-Policy" content="default-src 'self'; script-src 'self'">
+ <meta http-equiv="X-WebKit-CSP" content="default-src 'self'; script-src 'self'">
+
+'''Configuration of the web server'''
+
+If you can configure your own web server, which is usually not possible in low-budget hosting packages, there is this option via '''changes to .htaccess''':
+
+ # Download / Load content only from explicitly allowed sites
+ # Example: Allow everything from own domain, nothing from external sources:
+
+ Header set Content-Security-Policy "default-src 'none'; frame-src 'self'; font-src 'self';img-src 'self' siwecos.de; object-src 'self'; script-src 'self'; style-src 'self';"
+
+Here is an example of an .htaccess file which will set the '''Header Scanner''' to green.
+([[Htaccess/EN|.htaccess example]])
+
+### Link
+
+Content-Security-Policy-Vulnerability
+
+### Negative
+
+Content Security Policy insecure
+
+### Positive
+
+A secure configuration of the [https://en.wikipedia.org/wiki/Content_Security_Policy Content Security Policy (CSP)] was found.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## CONTENT_TYPE
+
+### Headline
+
+Check of the HTTP content type
+
+### Category
+
+Webserver
+
+### Description
+
+The content type is a declaration that is usually placed in the [[Header/EN|header]] of a web page, the so-called HTTP [[Header/EN|header]]. This declaration defines the character set and the type of data that the page contains. If the definition is missing, the web browser will try to guess the content type; this can lead to security flaws such as Code-Page-Sniffing. This information is also important for rendering the web page correctly in every browser and on every computer. If a server sends a document to a [https://en.wikipedia.org/wiki/User_agent User Agent] (for example to the browser), it is helpful to supply some information about the file format in the content type field of the HTTP [[Header/EN|header]]. This information declares the [https://en.wikipedia.org/wiki/Media_type MIME type] and sends the character encoding of the document, such as text/html, text/plain, etc. to the browser.
+
+### Background
+
+The content type is a meta data declaration which is placed in the [[Header/EN|header]] of a web page. This declaration defines the character set and the type of data that the page contains. This information is important for rendering the web page correctly in every browser and on every computer. The content type can be specified in the source code by entering a relatively short piece of code. The UTF-8 character set should be used.
+
+### Consequence
+
+By specifying the correct [[Header/EN|header]] declaration, various [https://en.wikipedia.org/wiki/Cross-site_scripting cross-site scripting attacks] can be prevented. If the [https://en.wikipedia.org/wiki/Character_encoding character encoding] is not specified, some web browser will try to interpret the source code, thus making certain attacks possible which require a different character set.
+
+### Solution_Tips
+
+If the content type declaration is not configured correctly, your website is probably vulnerable to attacks.
+
+Add the appropriate HTTP [[Header/EN|header]] or, alternatively, add a <meta> tag. Please note that, unlike a HTTP [[Header/EN|header]], the <meta> tag can be attacked more easily.
+
+'''text/html; charset=utf-8''';
+
+ <meta http-equiv="Content-Type" content="text/html; charset=utf-8"></pre>
+
+Furthermore, the server must be configured to send the correct charset information. In order to make these changes on the server, particular access rights are required. For further information about the different server configuration options, please refer to [https://www.w3.org/International/articles/http-charset/index.de W3.org].
+
+Moreover, it is also possible to pass the correct charset information to the [http://httpd.apache.org/docs/2.0/howto/htaccess.html '''.htaccess'''] file, which will overwrite the declaration in the HTTP [[Header/EN|header]]. [https://www.w3.org/International/questions/qa-htaccess-charset charset in .htaccess]
+
+'''Enter in the .htaccess file:'''
+ AddType 'text/html; charset=UTF-8' html
+
+Here is an example of an .htaccess file which will set the '''Header Scanner''' to green.
+([[Htaccess/EN|.htaccess example]])
+
+### Link
+
+Content-Type-Not-Correct
+
+### Negative
+
+The HTTP content type is configured incorrectly
+
+### Positive
+
+The content type is configured correctly.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## PUBLIC_KEY_PINS
+
+### Headline
+
+Check of Public Key Pinning (HPKP) - does not influence the score
+
+### Category
+
+Webserver
+
+### Description
+
+Powerful attackers, such as intelligence agencies, can create a signature with the help of a certification agency that is accepted by users. To prevent this, a website can be configured so that the [[Certificate|certificate]] must be saved permanently (pinning) when it is called up for the first time. If [https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning Key Pinning] is used, only the saved certificate will be accepted for the period of time specified by the website.
+
+### Background
+
+One of the most difficult [[Header/EN|headers]] for non-experts to configure. If you have a [[Certificate|SSL certificate]], you can communicate to the requesting browser how long the certificate will still be valid, and send a "key" as a unique identification. On the next request, the browser can then check whether the certificate is still the original certificate. If an attacker tries to offer a forged certificate to the user, the web browser will not send any data and not display any information. Further information about Public Key Pinning: [https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning Public Key Pinning (HPKP)].
+
+### Consequence
+
+For small and medium sized companies, the target group of SIWECOS, this [[Header/EN|header]] is usable, but not an absolute must. If this [[Header/EN|header]] is configured wrongly, your website may not be available for users for a long period of time, namely until the correct [[Certificate|certificates]] are used, or until the previously sent [[Header/EN|header]] expires.
+
+### Solution_Tips
+
+The setting of [[Public-Key-Pins-Disabled/EN|Public Key Pinning]] (HPKP) is not an absolute must, and is currently not taken into account by the SIWECOS Scanner. It is advisable not to activate them, or to do so only after consultation with an expert.
+
+The browsers Mozilla Firefox and Google Chrome comply with [https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning Public Key Pinning] and therefore ignore HPKP-[[Header/EN|headers]]. If only a single pin is set, an error message will appear. In order for pin validation to be successful, it is therefore always necessary to provide at least two public keys or a back-up pin. Interested parties should get in touch with an IT security expert or web developer.
+
+Further information can be found at [https://www.zdnet.com/article/google-chrome-is-backing-away-from-public-key-pinning-and-heres-why/ Article from ZDNET]
+
+
+
+
+'''Activate HPKP''' - This feature can be activated easily by returning a public-key-pins HTTP [[Header/EN|header]] when the website is called up via HTTPS. ([https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning more informations]).
+
+ Public-Key-Pins: pin-sha256="base64=="; max-age=expireTime [; includeSubdomains][; report-uri="reportURI"]
+
+Here is an example of an .htaccess file which will set the '''Header Scanner''' to green.
+([[Htaccess/EN|.htaccess example]])
+<!--pin-sha256="<HASH>"; pin-sha256="<HASH>"; max-age=2592000; includeSubDomains;-->
+
+### Link
+
+Public-Key-Pins-Disabled
+
+### Negative
+
+[https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning Public Key Pinning] is not available (HPKP is currently not under review).
+
+### Positive
+
+[[Public-Key-Pins-Disabled/EN|Public Key Pinning]] is active (The result does not influence the score).
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## REFERRER_POLICY
+
+### Headline
+
+Checking the Referrer Policy
+
+### Category
+
+Webserver
+
+### Description
+
+A well-defined Referrer Policy '''protects the privacy''' of your website visitors, but has no ''direct'' influence on the security of your website.
+
+### Background
+
+A well-defined Referrer Policy '''protects the privacy''' of your website visitors.
+
+### Consequence
+
+A missing or incorrect referrer policy enables unwanted user-identifying information outflow.
+
+### Solution_Tips
+
+With the entry '''Referrer Policy''' in the [[Header/EN|Header]] which referrer information that was sent in the ''Referrer Header'' should be included in requests and which not can be regulated. There are many different options that can be set. Alongside Firefox, Chrome and Opera already support several options for this [[Header/EN|header]] entry. Currently these [[Header/EN|header]] entries form a [https://www.w3.org/TR/referrer-policy/ Empfehlungskandidaten des W3C vom 26.01.2017]. The document linked above provides an exact description of the individual possibilities.
+
+'''Note on spelling:''' The correct English spelling is '''Referrer'''. However, the original RFC ([https://tools.ietf.org/html/rfc2068#section-14.37 RFC 2068]) contained an accidental misspelling ''Referer'' and thus raises this spelling to the standard within HTTP. In other standards such as DOM, the correct spelling is used. When a Referrer is set, the web browser sets its own Header, which is then called e.g. `Referer: google.com`. IN this case, Referrer fit spelled wrongly, but is correct according to the standard.
+
+We recommend that the Referrer Policy Header be set to be as restrictive as possible, i.e. to be set to ”no-referrer," for example.
+
+== Examples ==
+'''Referrer Policy Definition by Server Header:'''
+ # Referrer Policy
+ Header set referrer-Policy "no-referrer"
+
+'''Referrer Policy Definition by HTML code:'''
+ <meta name="referrer" content="no-referrer" />
+'''Statement:''' The value `'''no-referrer'''` instructs the browser to send '''Never''' ''Referer Header'', which is provided by your site. This includes links to pages on your own website.
+
+{| class="wikitable" style="margin:auto;”
+|- style="border: 4px solid #C31622; color:#000000; background-color:#f6f6f6;"
+|
+Other useful instructions can be `'''same-origin'''`, `'''strict-origin'''` or `'''origin-when-cross-origin`'''.
+|}
+
+The value `'''same origin'''` instructs the browser to send only ''Referer Header'' provided by your website. If the target is another [[domain]], no referrer information will be sent.
+
+The value `'''strict-origin'''` instructs the browser, to always indicate the origin domain as ''Referer Header''.
+
+The value '''origin-when-cross-origin'''` instructs the browser to send the full referrer URL only if you stay on the same [[Domain]]. Once the domain is left via [[HTTPS]] or another [[Domain]]  is addressed, only the source domain is sent.
+
+Detailed information and examples can be found at [https://scotthelme.co.uk/a-new-security-header-referrer-policy/Scott Helme].
+
+### Link
+
+Referrer-Policy
+
+### Negative
+
+Referrer Policy is insecure
+
+### Positive
+
+Referrer Policy is secure
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## SET_COOKIE
+
+### Headline
+
+Check of Set-Cookie
+
+### Category
+
+Webserver
+
+### Description
+
+Cookies should be secured by setting the HttpOnly and Secure flags to ensure they cannot be read or altered by others.
+
+### Background
+
+Checks whether or not cookies are secured.
+
+### Consequence
+
+Unsecured cookies can be altered or read through a [https://en.wikipedia.org/wiki/Man-in-the-middle_attack man-in-the-middle-attack].
+
+### Solution_Tips
+
+`httpOnly`-flag: set this so that cookies cannot be accessed by Javascript. You protect session information from being stolen and misused. Whoever owns a session cookie is authenticated.
+`secure`-Flag: set this to ensure that cookies are only transmitted across encrypted (https) channels.
+
+### Link
+
+Set-Cookie
+
+### Negative
+
+Cookies are not secured.
+
+### Positive
+
+Cookies are secured.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## STRICT_TRANSPORT_SECURITY
+
+### Headline
+
+Check of HSTS protection
+
+### Category
+
+Webserver
+
+### Description
+
+[https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security HTTP Strict Transport Security (HSTS)] ensures that the website can only be accessed via a secure HTTPS connection for a specified time period. The website operator can define the length of the time period, and whether this rule should also apply to subdomains.
+
+### Background
+
+[https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security HTTP Strict Transport Security (HSTS)] protection is inactive, the communication between your website and its visitors can be intercepted and manipulated.
+
+### Consequence
+
+Currently, your website is not protected against using an outdated [https://en.wikipedia.org/wiki/Transport_Layer_Security SSL/TLS] standard (protocol downgrade attacks) and against cookie hijacking. This allows an attacker to intercept and manipulate your user's communication. Using this information, an attacker could launch further attacks or spam your users with unwanted advertisements and malicious code. [https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security HTTP Strict Transport Security (HSTS)] is an excellent feature to strengthen your site and its implementation of TLS by forcing the user agent to use HTTPS.
+
+### Solution_Tips
+
+If the connection to your page is not encrypted, all communication between your site and its users can be intercepted and manipulated.
+
+max-age=63072000; includeSubdomains;
+HTTP Strict Transport Security (HSTS) is a web security policy mechanism that is easy to integrate.
+
+ # Activate HTTP Strict Transport Security (HSTS)
+ # Required: "max-age"
+ # Optional: "includeSubDomains"</pre>
+ '''Header set Strict-Transport-Security "max-age=31556926; includeSubDomains"'''
+
+Here is an example of an .htaccess file which will set the '''Header Scanner''' to green.
+([[Htaccess/EN|.htaccess example]])
+
+### Link
+
+No-Encryption-Found
+
+### Negative
+
+HSTS protection error
+
+### Positive
+
+Your website can only be reached via the secure HTTPS protocol. Communication between your website and its visitors can not be intercepted or manipulated.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## X_CONTENT_TYPE_OPTIONS
+
+### Headline
+
+Check of the X-Content-Type header
+
+### Category
+
+Webserver
+
+### Description
+
+The X-Content-Type-Options settings in the [[Header/EN|header]] prevent that the browser interprets data as anything other than declared by the content type in the HTTP [[Header/EN|header]]. The [[Header/EN|header]] settings are not set here.
+
+### Background
+
+There is only one definable value "nosniff", which prevents the Internet Explorer and Google Chrome from searching for other possible MIME types, other than the declared Content-Type (for example text/html). For Chrome this also applies to downloading extensions. The [[Header/EN|header]] entry reduces the load from so-called [https://en.wikipedia.org/wiki/Drive-by_download drive-by download attacks]. Websites with support for uploading files which, if the names are chosen skillfully, will be treated as executable files or as dynamic [[HTML|HTML-Datei]] by the [[Browser]], could infect your computer or other computers with malicious code. For further information on '''X-Content-Type-Options''', please refer to the report by [https://www.golem.de/news/cross-site-scripting-javascript-code-in-bilder-einbetten-1411-110264-2.html Golem.de (German only)].
+
+### Consequence
+
+Implementation is easy and does not require additional adjustments. Prevents attacks on users of Internet Explorer.
+
+### Solution_Tips
+
+nosniff;
+
+'''Code example of an .htaccess file on an Apache webserver.'''
+
+ <IfModule mod_headers.c>
+   # prevent mime based attacks like drive-by download attacks, IE and Chrome
+   '''Header set X-Content-Type-Options "nosniff"'''
+ </IfModule>
+
+Here is an example of an .htaccess file which will set the '''Header Scanner''' to green.
+([[Htaccess/EN|.htaccess example]])
+
+### Link
+
+X-Content-Type-Options-Vulnerability
+
+### Negative
+
+X-Content-Type [[Header/EN|header]] is missing.
+
+### Positive
+
+The HTTP [[Header/EN|header]] is set correctly.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## X_FRAME_OPTIONS
+
+### Headline
+
+Checking the HTTP header X-frame options
+
+### Category
+
+Webserver
+
+### Description
+
+X-Frame-Options helps to prevent attacks carried out by rendering content within a frame. This largely mitigates the risk of [https://en.wikipedia.org/wiki/Clickjacking clickjacking attacks]. Downgrading attacks, as known in the Internet Explorer, are also minimized.
+
+### Background
+
+This [[Header/EN|header]] entry determines whether a browser is allowed to render a page in a ''frame'' or ''iframe''. This can prevent so-called clickjacking attacks by making sure that the website is not embedded in another website. The following options are available:
+<poem>
+'''DENY:''' The page is not rendered if it is being loaded in a ''frame'' or ''iframe''.
+'''SAMEORIGIN:''' The page is only rendered if the ''frame'' or ''iframe'' is located in the same domain.
+'''ALLOW-FROM DOMAIN:''' The page is not rendered if the domain is different from the domain specified here.
+</poem>
+
+### Consequence
+
+Prevents for example [https://en.wikipedia.org/wiki/Clickjacking clickjacking attacks]. Easy to implement, and requires no further adjustments on the website.
+
+### Solution_Tips
+
+If is was reported, that the HTTP [[Header/EN|header]] X-Frame-Options is not set, your website is not sufficiently protected from [https://en.wikipedia.org/wiki/Clickjacking clickjacking attacks].
+
+Set in the HTTP [[Header/EN|header]] X-Frame-Options according to your requirements. The '''X-Frame-Options''' field in the HTTP header can be used to determine whether a browser is allowed to render or embed the target page in a <frame>, <iframe> or <object>. Websites can use this header to deflect clickjacking attacks by preventing their content from being embedded in third party pages.
+
+With the HTTP-Header command X-Frame-Options, modern web browsers can be instructed to prevent loading a page in a frame on another website. To do this, the following setting must be entered in the .htaccess file:
+
+Header always append X-Frame-Options DENY
+
+ Header always append X-Frame-Options DENY
+
+Alternatively, you can permit the page to be embedded only in other pages within the same domain:
+
+ Header always append X-Frame-Options SAMEORIGIN
+
+If a website must be embedded in an external page, a domain can be specified:
+
+ Header always append X-Frame-Options ALLOW-FROM botfrei.de
+
+Here is an example of an .htaccess file which will set the '''Header Scanner''' to green.
+([[Htaccess/EN|.htaccess example]])
+
+### Link
+
+X-Frame-Options-Vulnerability
+
+### Negative
+
+HTTP [[Header/EN|header]] X-Frame-Options not set.
+
+### Positive
+
+The [[Header/EN|Header]] is set correctly and improves protection against framing attacks such as UI redressing and clickjacking.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## X_XSS_PROTECTION
+
+### Headline
+
+Check of the X-Content-Type header
+
+### Category
+
+Webserver
+
+### Description
+
+The HTTP [[Header/EN|header]] X-XSS-Protection defines how built-in XSS filters in the browser are configured. A default installation can indicate an incorrect configuration.
+
+### Background
+
+This [[Header/DE|Header]]] activates the one that is used in most current browsers (Internet Explorer, Chrome and Safari) built-in Cross-Site Scripting Protection (XSS). Protection is enabled by default, so this header is only for reactivating the filter if the user has disabled it. This header is only supported for IE 8+, Opera, Chrome and Safari.
+
+### Consequence
+
+Prevents reflected [https://en.wikipedia.org/wiki/Cross-site_scripting XSS attacks]. Easy to implement, and requires no further adjustments on the website.
+
+### Solution_Tips
+
+If it was reported, that your website is probably not sufficiently protected from [https://en.wikipedia.org/wiki/Cross-site_scripting XSS attacks]:
+
+1; mode=block
+
+'''Code example of an .htaccess file on an Apache webserver.'''
+
+   # Turn on XSS prevention tools, activated by default in IE and Chrome
+   '''Header set X-XSS-Protection "1; mode=block"'''
+
+Here is an example of an .htaccess file which will set the '''Header Scanner''' to green.
+([[Htaccess/EN|.htaccess example]])
+
+### Link
+
+XSS-Vulnerability
+
+### Negative
+
+[https://en.wikipedia.org/wiki/Cross-site_scripting Cross-site scripting] protection is not active or configured incorrectly.
+
+### Positive
+
+[https://en.wikipedia.org/wiki/Cross-site_scripting Cross-site scripting] (XSS) protection of the web browser is active on your website.
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+## _RESULTS
+
+### CSP_CORRECT
+
+The [[Header/EN|header]] is set correctly and corresponds to the recommendations.
+
+### CSP_DEFAULT_SRC_MISSING
+
+The default-src directive is missing.
+
+### CSP_LEGACY_HEADER_SET
+
+The outdated [[Header/EN|header]] '':HEADER_NAME'' is used. The new standardized [[Header/EN|header]] is ''Content-Security-Policy''.
+
+### CSP_NO_UNSAFE_INCLUDED
+
+The [https://en.wikipedia.org/wiki/Content_Security_Policy Content Security Policy (CSP)] does not contain any unsafe directives, but it may not be configured securely.
+
+### CSP_UNSAFE_INCLUDED
+
+The [[Header/EN|header]] is set insecurely because it contains 'unsafe-inline' or 'unsafe-eval' directives.
+
+### CT_CORRECT
+
+The [[Header/EN|header]] is set correctly and corresponds to the recommendations.
+
+### CT_HEADER_WITHOUT_CHARSET
+
+The [[Header/EN|header]] is used without a character set and thus not safe.
+
+### CT_HEADER_WITH_CHARSET
+
+The [[Header/EN|header]] is set correctly and contains a character set specification.
+
+### CT_META_TAG_SET
+
+The [[Header/EN|header]] is set correctly, but it does not contain a character set specification or does not correspond to the recommendations. ":META" was found.
+
+### CT_META_TAG_SET_CORRECT
+
+The ":META" specification in the HTML [[Header/EN|header]] is set correctly.
+
+### CT_WRONG_CHARSET
+
+A false or invalid character set was used. The configuration is not safe.
+
+### DIRECTIVE_SET
+
+The directive ':DIRECTIVE' is set.
+
+### EMPTY_DIRECTIVE
+
+The directive is explicity set as empty.
+
+### HEADER_ENCODING_ERROR
+
+The [[Header/EN|header]] ''':HEADER_NAME''' contains characters which cannot be processed.
+
+### HEADER_NOT_SET
+
+The [[Header/EN|header]] is not set.
+
+### HEADER_SET_MULTIPLE_TIMES
+
+The [[Header/EN|header]] was set several times.
+
+### HPKP_LESS_15
+
+The public keys are pinned for less than 15 days.
+
+### HPKP_MORE_15
+
+The public keys are pinned for more than 15 days.
+
+### HPKP_REPORT_URI
+
+A 'report-uri' is set.
+
+### HSTS_LESS_6
+
+The value of 'max-age' is less than 6 months.
+
+### HSTS_MORE_6
+
+The value of 'max-age' is greater than 6 months.
+
+### HSTS_PRELOAD
+
+The 'preload' directive is set.
+
+### HTTPONLY_FLAG_SET
+
+The HttpOnly flag is set.
+
+### INCLUDE_SUBDOMAINS
+
+'includeSubDomains' is set.
+
+### INVALID_HEADER
+
+The following elements of your [[Header/EN|Header]]] are invalid:
+:HEADER
+
+### MAX_AGE_ERROR
+
+There was an error while checking the 'max-age' directive.
+
+### NO_HTTPONLY_FLAG_SET
+
+The HttpOnly flag is not set.
+
+### NO_HTTP_RESPONSE
+
+The specified URL did not respond.
+
+### NO_SECURE_FLAG_SET
+
+The secure flag is not set.
+
+### SECURE_FLAG_SET
+
+The secure flag is set.
+
+### WRONG_DIRECTIVE_SET
+
+A wrong or unknown directive is set.
+
+### XCTO_CORRECT
+
+The [[Header/EN|header]] is set correctly and corresponds to the recommendations.
+
+### XCTO_NOT_CORRECT
+
+The [[Header/EN|header]] is not set correctly.
+
+### XFO_CORRECT
+
+The [[Header/EN|header]] is set correctly and corresponds to the recommendations.
+
+### XFO_WILDCARDS
+
+The [[Header/EN|header]] contains wildcard information (*) and is therefore not configured securely.
+
+### XXSS_BLOCK
+
+The 'mode=block' directive is active.
+
+### XXSS_CORRECT
+
+The [[Header/EN|header]] is set correctly and corresponds to the recommendations.
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..b9a4261
--- /dev/null
+++ b/README.md
@@ -0,0 +1,427 @@
+# SIWECOS Documentation
+
+This documentation describes the two modules "HTTP Secure Header Scanner" and "DOMXSS-Scanner".
+
+# Startup using Docker
+
+`docker run --rm --name siwecos-hshs-domxss-scanner -p 8000:2015 siwecos/hshs-domxss-scanner`
+
+# HTTP Secure Header Scanner
+
+This module scans the HTTP header of a specific URL and returns a report that can be used to improve the configuration for a better security.
+
+## API-Call
+
+Send a POST-Request to `http://localhost/api/v1/header`:
+
+```
+POST /api/v1/header HTTP/1.1
+Host: localhost:8000
+Content-Type: application/json
+Cache-Control: no-cache
+
+
+{
+  "url": "https://siwecos.de",
+  "callbackurls": [
+    "http://localhost:9002"
+  ]
+}
+```
+
+The parameters `url` and `callbackurls` are required:
+
+- `url` must be a `string`.
+- `callbackurls` must be an `array` with only contains one or more `string`s.
+
+### Sample output
+
+```json
+{
+  "name": "HEADER",
+  "hasError": false,
+  "errorMessage": null,
+  "score": 66,
+  "tests": [
+    {
+      "name": "CONTENT_SECURITY_POLICY",
+      "hasError": true,
+      "errorMessage": "HEADER_NOT_SET",
+      "score": 0,
+      "scoreType": "warning",
+      "testDetails": []
+    },
+    {
+      "name": "CONTENT_TYPE",
+      "hasError": false,
+      "errorMessage": null,
+      "score": 100,
+      "scoreType": "warning",
+      "testDetails": [
+        {
+          "placeholder": "META",
+          "values": ["<meta charset=\"UTF-8\" \\/>"]
+        },
+        {
+          "placeholder": "CT_META_TAG_SET_CORRECT"
+        },
+        {
+          "placeholder": "HEADER",
+          "values": ["text\\/html; charset=UTF-8"]
+        },
+        {
+          "placeholder": "CT_CORRECT"
+        }
+      ]
+    },
+    {
+      "name": "PUBLIC_KEY_PINS",
+      "hasError": true,
+      "errorMessage": "HEADER_NOT_SET",
+      "score": 0,
+      "scoreType": "info",
+      "testDetails": []
+    },
+    {
+      "name": "STRICT_TRANSPORT_SECURITY",
+      "hasError": true,
+      "errorMessage": "HEADER_NOT_SET",
+      "score": 0,
+      "scoreType": "warning",
+      "testDetails": []
+    },
+    {
+      "name": "X_CONTENT_TYPE_OPTIONS",
+      "hasError": false,
+      "errorMessage": null,
+      "score": 100,
+      "scoreType": "warning",
+      "testDetails": [
+        {
+          "placeholder": "HEADER",
+          "values": ["nosniff"]
+        },
+        {
+          "placeholder": "XCTO_CORRECT"
+        }
+      ]
+    },
+    {
+      "name": "X_FRAME_OPTIONS",
+      "hasError": false,
+      "errorMessage": null,
+      "score": 100,
+      "scoreType": "warning",
+      "testDetails": [
+        {
+          "placeholder": "HEADER",
+          "values": ["SAMEORIGIN"]
+        },
+        {
+          "placeholder": "XFO_CORRECT"
+        }
+      ]
+    },
+    {
+      "name": "X_XSS_PROTECTION",
+      "hasError": false,
+      "errorMessage": null,
+      "score": 100,
+      "scoreType": "warning",
+      "testDetails": [
+        {
+          "placeholder": "HEADER",
+          "values": ["1; mode=block"]
+        },
+        {
+          "placeholder": "XXSS_CORRECT"
+        },
+        {
+          "placeholder": "XXSS_BLOCK"
+        }
+      ]
+    }
+  ]
+}
+```
+
+## Scanned headers and descriptions
+
+### Content-Type (`Content-Type`)
+
+##### Description
+
+When a server sends a document to a user agent (eg. a browser) it also sends information in the Content-Type field of the accompanying HTTP header about what type of data format this is. This information is expressed using a MIME type label. Documents transmitted with HTTP that are of type text, such as text/html, text/plain, etc., can send a charset parameter in the HTTP header to specify the character encoding of the document.
+
+##### Best-Practice
+
+`text/html; charset=utf-8;`
+
+##### Impact and Feasibility (10/10)
+
+A correct header with the setted charset prevents different XSS attacks that use other charsets than the original webpage so they can bypass XSS prevention.
+
+It's easy and harmless to set the correct charset without affecting the sites content.
+
+### Content-Security-Policy (`Content-Security-Policy`)
+
+##### Description
+
+Content Security Policy (CSP) requires careful tuning and precise definition of the policy. If enabled, CSP has significant impact on the way browser renders pages (e.g., inline JavaScript disabled by default and must be explicitly allowed in policy). CSP prevents a wide range of attacks, including Cross-site scripting and other cross-site injections.
+
+##### Best-Practice
+
+Best Practice is to use the CSP with `default-src 'none'` and without any `unsafe-eval` or `unsafe-inline` directives.
+
+##### Impact and Feasibility (7/10)
+
+The Content-Security-Policy can prevent a wide range of attacks that infiltrate external content and code. With the correct setting it's a powerful method to increase the sites security.
+
+On the other hand it's often not possible to set a secure CSP header without modifying the website's source code.
+
+Impact-Rating: 10/10 | Feasibility: 5/10
+
+### Public-Key-Pins (`Public-Key-Pins`)
+
+##### Description
+
+HTTP Public Key Pinning (HPKP) is a security mechanism which allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates. (For example, sometimes attackers can compromise certificate authorities, and then can mis-issue certificates for a web origin.).
+
+##### Best-Practice
+
+Do not use this. // `pin-sha256="<HASH>"; pin-sha256="<HASH>"; max-age=2592000; includeSubDomains`
+
+##### Impact and Feasibility (3/10)
+
+For small and medium-sized enterprises as is the target group of SIWECOS this header is a 'nice to have' but not a absolutely must.
+
+If this header is misconfigured your website would not be available for the users until the correct certificates are used or `max-age` is reached.
+
+### Strict-Transport-Security (`Strict-Transport-Security`)
+
+##### Description
+
+HTTP Strict Transport Security (HSTS) is a web security policy mechanism which helps to protect websites against protocol downgrade attacks and cookie hijacking. It allows web servers to declare that web browsers (or other complying user agents) should only interact with it using secure HTTPS connections, and never via the insecure HTTP protocol.
+
+##### Best-Practice
+
+`max-age=63072000; includeSubdomains`
+
+##### Impact and Feasibility (10/10)
+
+This is a must-have header for every webpage and easy and harmless to integrate.
+The header guaranteed that the traffic between the server and client has to be encrypted to communicate.
+
+### X-Content-Type-Options (`X-Content-Type-Options`)
+
+##### Description
+
+Setting this header will prevent the browser from interpreting files as something else than declared by the content type in the HTTP headers.
+
+##### Best-Practice
+
+`nosniff`
+
+##### Impact and Feasibility (6/10)
+
+Easy to implement and no further adjustments on the website are needed.
+Only effects Internet Explorer.
+
+### X-Frame-Options (`X-Frame-Options`)
+
+##### Description
+
+X-Frame-Options response header improve the protection of web applications against Clickjacking. It declares a policy communicated from a host to the client browser on whether the browser must not display the transmitted content in frames of other web pages.
+
+##### Best-Practice
+
+Best Practice is to set this header accordingly to your needs.
+
+Do not use `allow-from: *`. Do not use any wildcards.
+
+##### Impact and Feasibility (9/10)
+
+Prevents Clickjacking attacks.
+
+Easy to implement and no further adjustments on the website are needed.
+
+### X-Xss-Protection (`X-Xss-Protection`)
+
+##### Description
+
+This header enables the Cross-site scripting (XSS) filter in the browser.
+
+##### Best-Practice
+
+`1; mode=block`
+
+##### Impact and Feasibility (9/10)
+
+Prevents reflected XSS attacks.
+
+Easy to implement and no further adjustments on the website are needed.
+
+# DOMXSS-Scanner
+
+This module scans the given URL and checks for DOMXSS sinks and sources.
+
+## API-Call
+
+Send a POST-Request to `http://localhost/api/v1/domxss`:
+
+```
+POST /api/v1/domxss HTTP/1.1
+Host: localhost:8000
+Content-Type: application/json
+Cache-Control: no-cache
+
+{
+  "url": "https://siwecos.de",
+  "callbackurls": [
+    "http://localhost:9002"
+  ]
+}
+```
+
+The parameters `url` and `callbackurls` are required:
+
+- `url` must be a `string`.
+- `callbackurls` must be an `array` with only contains one or more `string`s.
+
+### Sample output
+
+```json
+{
+  "name": "DOMXSS",
+  "hasError": false,
+  "errorMessage": null,
+  "score": 50,
+  "tests": [
+    {
+      "name": "SOURCES",
+      "hasError": false,
+      "errorMessage": null,
+      "score": 100,
+      "scoreType": "info",
+      "testDetails": [
+        {
+          "placeholder": "NO_SOURCES_FOUND",
+          "values": []
+        }
+      ]
+    },
+    {
+      "name": "SINKS",
+      "hasError": false,
+      "errorMessage": null,
+      "score": 0,
+      "scoreType": "info",
+      "testDetails": [
+        {
+          "placeholder": "SINKS_FOUND",
+          "values": {
+            "AMOUNT": 11
+          }
+        }
+      ]
+    }
+  ]
+}
+```
+
+## Scanned tasks and descriptions
+
+### Sources (`SOURCES`)
+
+##### Description
+
+A source is an input that could be controlled by an external (untrusted) source.
+
+> https://github.com/wisec/domxsswiki/wiki/Glossary
+
+##### Impact (1/10)
+
+The scan's result can only be used as an indication if there might be security vulnerabilities.
+Further advanced tests would be needed to confirm if there are vulnerabilities on the site or not.
+
+### Sinks (`SINKS`)
+
+##### Description
+
+A sink is a potentially dangerous method that could lead to a vulnerability. In this case a DOM Based XSS.
+
+> https://github.com/wisec/domxsswiki/wiki/Glossary
+
+##### Impact (2/10)
+
+The scan's result can only be used as an indication if there might be security vulnerabilities.
+Further advanced tests would be needed to confirm if there are vulnerabilities on the site or not.
+
+# Scanner Interface Values
+
+## HSHS-Scanner
+
+| Placeholder                   | Message                                                                                           |
+| ----------------------------- | ------------------------------------------------------------------------------------------------- |
+| **GENERAL**                   |                                                                                                   |
+| HEADER_NOT_SET                | The header is not set.                                                                            |
+| HEADER_SET_MULTIPLE_TIMES     | The header is set multiple times.                                                                 |
+| HEADER_ENCODING_ERROR         | The header is not correctly encoded.                                                              |
+| INVALID_HEADER                | The following header is not valid: `:HEADER`                                                      |
+| INCLUDE_SUBDOMAINS            | `includeSubDomains` is set.                                                                       |
+| MAX_AGE_ERROR                 | An error occured while checking `max-age`.                                                        |
+| NO_HTTP_RESPONSE              | No HTTP-Response for the given URL.                                                               |
+| **CONTENT-SECURITY-POLICY**   |                                                                                                   |
+| CSP_CORRECT                   | The header is `unsafe-` free and includes `default-src 'none'`.                                   |
+| CSP_DEFAULT_SRC_MISSING       | The `default-src` directive is missing.                                                           |
+| CSP_LEGACY_HEADER_SET         | The legacy header `:HEADER` is set. The new and standardized header is `Content-Security-Policy`. |
+| CSP_NO_UNSAFE_INCLUDED        | The header is free of any `unsafe-` directives.                                                   |
+| CSP_UNSAFE_INCLUDED           | The header contains `unsafe-inline` or `unsafe-eval` directives.                                  |
+| **CONTENT-TYPE**              |                                                                                                   |
+| CT_CORRECT                    | The header is set with the charset and follows the best practice.                                 |
+| CT_HEADER_WITH_CHARSET        | The header is set with the charset.                                                               |
+| CT_HEADER_WITHOUT_CHARSET     | The header is set without the charset.                                                            |
+| CT_META_TAG_SET               | A meta tag is set with a charset.                                                                 |
+| CT_META_TAG_SET_CORRECT       | A meta tag is set with a charset and follows the best practice.                                   |
+| CT_WRONG_CHARSET              | The given charset is wrong and thereby ineffective.                                               |
+| **PUBLIC-KEY-PINS**           |                                                                                                   |
+| HPKP_LESS_15                  | The keys are pinned for less than 15 days.                                                        |
+| HPKP_MORE_15                  | The keys are pinned for more than 15 days.                                                        |
+| HPKP_REPORT_URI               | A `report-uri` is set.                                                                            |
+| **REFERRER-POLICY**           |                                                                                                   |
+| DIRECTIVE_SET                 | The directive :DIRECTIVE is set.                                                                  |
+| EMPTY_DIRECTIVE               | The directive is explicitly set as empty.                                                         |
+| WRONG_DIRECTIVE_SET           | A wrong or unknown directive is set.                                                              |
+| **SET-COOKIE**                |                                                                                                   |
+| SECURE_FLAG_SET               | The `secure` flag is set.                                                                         |
+| NO_SECURE_FLAG_SET            | The `secure` flag is not set.                                                                     |
+| HTTPONLY_FLAG_SET             | The `httpOnly` flag is set.                                                                       |
+| NO_HTTPONLY_FLAG_SET          | The `httpOnly` flag is not set.                                                                   |
+| **STRICT-TRANSPORT-SECURITY** |                                                                                                   |
+| HSTS_LESS_6                   | The value for `max-age` is smaller than 6 months.                                                 |
+| HSTS_MORE_6                   | The value for `max-age` is greater than 6 months.                                                 |
+| HSTS_PRELOAD                  | `preload` is set.                                                                                 |
+| **X-CONTENT-TYPE-OPTIONS**    |                                                                                                   |
+| XCTO_CORRECT                  | The header is set correctly.                                                                      |
+| XCTO_NOT_CORRECT              | The header is not set correctly.                                                                  |
+| **X-FRAME-OPTIONS**           |                                                                                                   |
+| XFO_CORRECT                   | The header is set and does not contain any wildcard.                                              |
+| XFO_WILDCARDS                 | The header contains wildcards and is thereby useless.                                             |
+| **X-XSS-PROTECTION**          |                                                                                                   |
+| XXSS_CORRECT                  | The header is set correctly.                                                                      |
+| XXSS_BLOCK                    | `mode=block` is activated.                                                                        |
+
+## DOMXSS-Scanner
+
+| Placeholder      | Message                                               |
+| ---------------- | ----------------------------------------------------- |
+| **GENERAL**      |                                                       |
+| NO_HTTP_RESPONSE | No HTTP-Response for the given URL.                   |
+| NO_CONTENT       | The site was empty and there was nothing to scan for. |
+| NO_SCRIPT_TAGS   | The scanner found no `script` tags to rate.           |
+| **SINKS**        |                                                       |
+| NO_SINKS_FOUND   | The scanner found no sinks.                           |
+| SINKS_FOUND      | The scanner found some sinks.                         |
+| **SOURCES**      |                                                       |
+| NO_SOURCES_FOUND | The scanner found no sources.                         |
+| SOURCES_FOUND    | The scanner found some sources.                       |
diff --git a/VERSION b/VERSION
new file mode 100644
index 0000000..9c6d629
--- /dev/null
+++ b/VERSION
@@ -0,0 +1 @@
+1.6.1
diff --git a/app/CSPParser.php b/app/CSPParser.php
new file mode 100644
index 0000000..e83556a
--- /dev/null
+++ b/app/CSPParser.php
@@ -0,0 +1,205 @@
+<?php
+
+namespace App;
+
+class CSPParser
+{
+    public $headerName = null;
+    public $hasLegacyHeader = false;
+    public $originalDirectivesString = null;
+    public $directives = null;
+
+    /**
+     * The CSP header that should be parsed.
+     *
+     * @param string $header
+     */
+    public function __construct(String $header)
+    {
+        $this->directives = collect();
+        $this->parse($header);
+    }
+
+    /**
+     * Parse the CSP and set the different parameters to it's values.
+     *
+     * @param string $header
+     *
+     * @return void
+     */
+    protected function parse(String $header)
+    {
+        $this->splitHeaderAndDirectives($header);
+        $this->createDirectivesCollection();
+    }
+
+    /**
+     * Returns if 'unsafe-inline' or 'unsafe-eval' are used in the given CSP-Header.
+     *
+     * @return bool containing unsafe-* values.
+     */
+    public function containsUnsafeValues()
+    {
+        return $this->directives->flatten()->contains("'unsafe-inline'") || $this->directives->flatten()->contains("'unsafe-eval'");
+    }
+
+    /**
+     * @param string $header
+     *
+     * @return void
+     */
+    protected function splitHeaderAndDirectives(String $header)
+    {
+        // check for header definition
+        if (strpos($header, 'Content-Security-Policy:') === 0) {
+            $this->headerName = 'Content-Security-Policy';
+            $this->originalDirectivesString = substr($header, 25);
+        }
+        // Check for legacy header
+        elseif (strpos($header, 'X-Content-Security-Policy:') === 0) {
+            $this->headerName = 'X-Content-Security-Policy';
+            $this->originalDirectivesString = substr($header, 27);
+            $this->hasLegacyHeader = true;
+        }
+        // Assume that no header definition is set
+        else {
+            $this->originalDirectivesString = $header;
+        }
+    }
+
+    /**
+     * Parse the header's directives list to a searchable directives collection.
+     *
+     * @return void
+     */
+    protected function createDirectivesCollection()
+    {
+        // strip leading and trailing whitespace
+        $directivesString = trim($this->originalDirectivesString);
+
+        // remove last ; in order to use the explode function without getting an empty value
+        if (substr($directivesString, -1, 1) === ';') {
+            $directivesString = substr($directivesString, 0, -1);
+        }
+
+        $splittedDirectives = explode(';', $directivesString);
+
+        foreach ($splittedDirectives as $directive) {
+            // Get direcitve name without whitespace
+            $directive = trim($directive);
+            $directive = preg_replace('/\s+/', ' ', $directive);
+
+            $splittedDirectiveParts = explode(' ', $directive);
+
+            // Put the directive with it's values to the directives collection
+            $this->directives->put(array_shift($splittedDirectiveParts), collect($splittedDirectiveParts));
+        }
+    }
+
+    /**
+     * Checks, if the submitted CSP is valid.
+     *
+     * @return bool
+     */
+    public function isValid()
+    {
+        // only valid directives exist
+        if ($this->notValidDirectives()->count() == 0) {
+            // each directive's values only have valid characters
+            foreach ($this->directives as $directive => $values) {
+                foreach ($values as $value) {
+                    if (!$this->hasOnlyValidCharacters($value)) {
+                        return false;
+                    }
+                }
+            }
+
+            return true;
+        }
+
+        return false;
+    }
+
+    protected function hasOnlyValidCharacters(String $check)
+    {
+        // Valid chars: (\x09|([\x20-\x2B])|([\x2D-\x3A])|([\x3C-\x7E]))
+        // https://www.w3.org/TR/CSP/#framework-directives
+        // VARCHAR and whitespace without ',' and ';'
+        // Note:
+        // Inversing the valid chars does not work with REGEX, but:
+        // whitepsace is stripped
+        // directives are exploded via ';'
+        // Therefore we can search for not printable ASCII-Chars or the ',' in the values list
+        if (preg_match('/[^\x21-\x7E]|,|;/', $check) === 0) {
+            return true;
+        }
+
+        return false;
+    }
+
+    /**
+     * Get a collection of notValidDirectives.
+     *
+     * @return Collection
+     */
+    public function notValidDirectives()
+    {
+        // check if $this->directives KEY is listed on allowed VALUES
+        return $this->directives->filter(function ($item, $key) {
+            return !$this->getAllowedDirectives()->flatten()->contains($key);
+        });
+    }
+
+    /**
+     * Returns a Collection of allowed directives for the CSP.
+     * https://developer.mozilla.org/de/docs/Web/HTTP/Headers/Content-Security-Policy.
+     *
+     * @return Collection allowedDirectives
+     */
+    protected function getAllowedDirectives()
+    {
+        return collect([
+            'fetch-directives' => [
+                'child-src', // deprecated
+                'connect-src',
+                'default-src',
+                'font-src',
+                'frame-src',
+                'img-src',
+                'manifest-src',
+                'media-src',
+                'object-src',
+                'prefetch-src', // experimental
+                'script-src',
+                'script-src-elem', // experimental
+                'script-src-attr', // experimental
+                'style-src',
+                'style-src-elem', // experimental
+                'style-src-attr', // experimental
+                'worker-src', // experimental
+            ],
+            'document-directives' => [
+                'base-uri',
+                'plugin-types',
+                'sandbox'
+            ],
+            'navigation-directives' => [
+                'form-action',
+                'frame-ancestors',
+                'navigate-to', // experimental
+            ],
+            'reporting-directives' => [
+                'report-uri', // deprectated
+                'report-to', // experimental
+            ],
+            'other-directives' => [
+                'block-all-mixed-content',
+                'referrer', // deprecated
+                'required-sri-for', // experimental
+                'trusted-types', // experimental
+                'require-trusted-types-for', // experimental
+                'upgrade-insecure-requests',
+            ],
+        ]);
+    }
+}
diff --git a/app/Console/Kernel.php b/app/Console/Kernel.php
index 622e774..05b9316 100644
--- a/app/Console/Kernel.php
+++ b/app/Console/Kernel.php
@@ -19,7 +19,8 @@ class Kernel extends ConsoleKernel
     /**
      * Define the application's command schedule.
      *
-     * @param  \Illuminate\Console\Scheduling\Schedule  $schedule
+     * @param \Illuminate\Console\Scheduling\Schedule $schedule
+     *
      * @return void
      */
     protected function schedule(Schedule $schedule)
diff --git a/app/DOMXSSCheck.php b/app/DOMXSSCheck.php
new file mode 100644
index 0000000..97dbef3
--- /dev/null
+++ b/app/DOMXSSCheck.php
@@ -0,0 +1,77 @@
+<?php
+
+namespace App;
+
+use App\Http\Requests\ScanStartRequest;
+use App\Ratings\SinksRating;
+use App\Ratings\SourcesRating;
+
+class DOMXSSCheck
+{
+    protected $response = null;
+
+    public function __construct(ScanStartRequest $request)
+    {
+        $this->response = new HTTPResponse($request);
+    }
+
+    public function report()
+    {
+        if ($this->response->hasErrors()) {
+            return [
+                'name'         => 'DOMXSS',
+                'version' 	    => file(base_path('VERSION'), FILE_IGNORE_NEW_LINES)[0],
+                'hasError'     => true,
+                'errorMessage' => TranslateableMessage::get('NO_HTTP_RESPONSE'),
+                'score'        => 0,
+                'tests'        => [],
+            ];
+        }
+
+        $sourcesRating = new SourcesRating($this->response);
+        $sinksRating = new SinksRating($this->response);
+
+        return [
+            'name'         => 'DOMXSS',
+            'version' 	    => file(base_path('VERSION'), FILE_IGNORE_NEW_LINES)[0],
+            'hasError'     => false,
+            'errorMessage' => null,
+            'score'        => ($sourcesRating->score + $sinksRating->score) / 2,
+            'tests'        => [
+                $sourcesRating,
+                $sinksRating,
+            ],
+        ];
+    }
+
+    public static function hasSources(String $input, bool $AMOUNT = false)
+    {
+        // RegEx from original authors
+        // https://github.com/wisec/domxsswiki/wiki/Finding-DOMXSS
+        $sourcePattern = '/(location\s*[\[.])|([.\[]\s*[\"\']?\s*(arguments|dialogArguments|innerHTML|write(ln)?|open(Dialog)?|showModalDialog|cookie|URL|documentURI|baseURI|referrer|name|opener|parent|top|content|self|frames)\W)|(localStorage|sessionStorage|Database)/';
+        $findings = preg_match_all($sourcePattern, $input);
+
+        if ($AMOUNT) {
+            return $findings;
+        }
+
+        return $findings ? true : false;
+    }
+
+    public static function hasSinks(String $input, bool $AMOUNT = false)
+    {
+        // RegEx from original authors
+        // https://github.com/wisec/domxsswiki/wiki/Finding-DOMXSS
+        $sinksPattern = '/((src|href|data|location|code|value|action)\s*[\"\'\]]*\s*\+?\s*=)|((replace|assign|navigate|getResponseHeader|open(Dialog)?|showModalDialog|eval|evaluate|execCommand|execScript|setTimeout|setInterval)\s*[\"\'\]]*\s*\()/';
+        $findings = preg_match_all($sinksPattern, $input);
+
+        $sinksPattern = '/after\(|\.append\(|\.before\(|\.html\(|\.prepend\(|\.replaceWith\(|\.wrap\(|\.wrapAll\(|\$\(|\.globalEval\(|\.add\(|jQUery\(|\$\(|\.parseHTML\(/';
+        $findings += preg_match_all($sinksPattern, $input);
+
+        if ($AMOUNT) {
+            return $findings;
+        }
+
+        return $findings ? true : false;
+    }
+}
diff --git a/app/DomxssReport.php b/app/DomxssReport.php
deleted file mode 100644
index de24bf4..0000000
--- a/app/DomxssReport.php
+++ /dev/null
@@ -1,51 +0,0 @@
-<?php
-
-namespace App;
-
-class DomxssReport
-{
-    public $url;
-
-    public function __construct($url)
-    {
-        $this->url = $url;
-    }
-
-    public function hasSources()
-    {
-        $response = new HTTPResponse($this->url);
-
-        if ($response !== null) {
-            // RegEx from original authors
-            // https://github.com/wisec/domxsswiki/wiki/Finding-DOMXSS
-            $sourcePattern = "/(location\s*[\[.])|([.\[]\s*[\"']?\s*(arguments|dialogArguments|innerHTML|write(ln)?|open(Dialog)?|showModalDialog|cookie|URL|documentURI|baseURI|referrer|name|opener|parent|top|content|self|frames)\W)|(localStorage|sessionStorage|Database)/";
-
-            $findings = preg_match($sourcePattern, $response->body());
-
-            if ($findings !== false && $findings > 0) {
-                return true;
-            }
-        }
-
-        return false;
-    }
-
-    public function hasSinks()
-    {
-        $response = new HTTPResponse($this->url);
-
-        if ($response !== null) {
-            // RegEx from original authors
-            // https://github.com/wisec/domxsswiki/wiki/Finding-DOMXSS
-            $sourcePattern = "/((src|href|data|location|code|value|action)\s*[\"'\]]*\s*\+?\s*=)|((replace|assign|navigate|getResponseHeader|open(Dialog)?|showModalDialog|eval|evaluate|execCommand|execScript|setTimeout|setInterval)\s*[\"'\]]*\s*\()/";
-
-            $findings = preg_match($sourcePattern, $response->body());
-
-            if ($findings !== false && $findings > 0) {
-                return true;
-            }
-        }
-
-        return false;
-    }
-}
diff --git a/app/Exceptions/Handler.php b/app/Exceptions/Handler.php
index eed9e25..2a70eda 100644
--- a/app/Exceptions/Handler.php
+++ b/app/Exceptions/Handler.php
@@ -27,7 +27,8 @@ class Handler extends ExceptionHandler
      *
      * This is a great spot to send exceptions to Sentry, Bugsnag, etc.
      *
-     * @param  \Exception  $exception
+     * @param \Exception $exception
+     *
      * @return void
      */
     public function report(Exception $exception)
@@ -38,8 +39,9 @@ public function report(Exception $exception)
     /**
      * Render an exception into an HTTP response.
      *
-     * @param  \Illuminate\Http\Request  $request
-     * @param  \Exception  $exception
+     * @param \Illuminate\Http\Request $request
+     * @param \Exception               $exception
+     *
      * @return \Illuminate\Http\Response
      */
     public function render($request, Exception $exception)
@@ -61,8 +63,9 @@ public function render($request, Exception $exception)
     /**
      * Convert an authentication exception into an unauthenticated response.
      *
-     * @param  \Illuminate\Http\Request  $request
-     * @param  \Illuminate\Auth\AuthenticationException  $exception
+     * @param \Illuminate\Http\Request                 $request
+     * @param \Illuminate\Auth\AuthenticationException $exception
+     *
      * @return \Illuminate\Http\Response
      */
     protected function unauthenticated($request, AuthenticationException $exception)
diff --git a/app/HTTPResponse.php b/app/HTTPResponse.php
index aa3b991..87e182b 100644
--- a/app/HTTPResponse.php
+++ b/app/HTTPResponse.php
@@ -2,68 +2,66 @@
 
 namespace App;
 
-use Cache;
+use App\Http\Requests\ScanStartRequest;
 use GuzzleHttp\Client;
-use GuzzleHttp\HandlerStack;
-use Kevinrob\GuzzleCache\CacheMiddleware;
-use Kevinrob\GuzzleCache\Storage\LaravelCacheStorage;
-use Kevinrob\GuzzleCache\Strategy\PrivateCacheStrategy;
+use Illuminate\Support\Facades\Log;
 
 class HTTPResponse
 {
     protected $url;
     protected $response = null;
+    protected $hasErrors = false;
 
-    public function __construct($url, Client $client = null)
+    public function __construct(ScanStartRequest $request, Client $client = null)
     {
-        $this->url = $url;
+        $this->url = $this->punycodeUrl($request->get('url'));
+        Log::info('Scanning the following URL: ' . $this->url);
+
+        $this->userAgent = $request->get('userAgent') ?: 'Mozilla/5.0 (X11; Linux x86_64; rv:63.0) Gecko/20100101 Firefox/63.0';
+
         $this->client = $client;
+
+        $this->calculateResponse();
     }
 
     /**
-     * Returns the (cached) GuzzleHttp Response
+     * Calculates the HTTPResponse.
      *
+     * @return void
      */
-    public function response()
+    protected function calculateResponse()
     {
         if ($this->response === null) {
             if ($this->client === null) {
-                /**
-                 * The $stack enables caching for the network traffic
-                 * BEST THANKS AND WISHES TO @Kevinrob for guzzle-cache-middleware
-                 */
-                $stack = HandlerStack::create();
-                $stack->push(
-                    new CacheMiddleware(
-                        new PrivateCacheStrategy(
-                            new LaravelCacheStorage(
-                                Cache::store(env('CACHE_DRIVER', 'file'))
-                            )
-                        )
-                    ),
-                    'cache'
-                );
-                $this->client = new Client(['handler' => $stack]);
+                $this->client = new Client();
             }
 
             try {
                 $this->response = $this->client->get($this->url, [
                     // User-Agent because some sites (e.g. facebook) do not return all headers if the user-agent is missing or Guzzle
                     'headers' => [
-                        'User-Agent' => 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1',
+                        'User-Agent' => $this->userAgent,
                     ],
-                    'verify' => false,
+                    'verify'      => false,
                     'http_errors' => false,
+                    'timeout' => 15
                 ]);
             } catch (\Exception $exception) {
-                \Log::critical($this->url . ": " . $exception);
+                $this->hasErrors = true;
             }
         }
+    }
+
+    /**
+     * Returns the GuzzleHttp Response.
+     */
+    public function response()
+    {
         return $this->response;
     }
 
     /**
-     * @return mixed original URL
+     * @return string original URL
      */
     public function url()
     {
@@ -75,6 +73,10 @@ public function url()
      */
     public function statusCode()
     {
+        if ($this->hasErrors()) {
+            return;
+        }
+
         return $this->response()->getStatusCode();
     }
 
@@ -83,15 +85,24 @@ public function statusCode()
      */
     public function headers()
     {
+        if ($this->hasErrors()) {
+            return;
+        }
+
         return collect($this->response()->getHeaders());
     }
 
     /**
      * @param $name string header name in lowercase
+     *
      * @return array
      */
     public function header($name)
     {
+        if ($this->hasErrors()) {
+            return;
+        }
+
         return $this->headers()->mapWithKeys(function ($value, $key) {
             return [strtolower($key) => $value];
         })->get(strtolower($name));
@@ -102,6 +113,49 @@ public function header($name)
      */
     public function body()
     {
-        return $this->response()->getBody()->getContents();
+        if ($this->hasErrors()) {
+            return;
+        }
+
+        // Fixed empty body
+        // See: https://stackoverflow.com/questions/30549226/guzzlehttp-how-get-the-body-of-a-response-from-guzzle-6#30549372
+        return (string)$this->response()->getBody();
+    }
+
+    /**
+     * Returns error status.
+     *
+     * @return bool
+     */
+    public function hasErrors()
+    {
+        if (($this->hasErrors == true) || ($this->response == null)) {
+            return true;
+        }
+
+        return false;
+    }
+
+    /**
+     * Returns the Punycode encoded URL for a given URL.
+     *
+     * @param string $url URL to encode
+     *
+     * @return string Punycode-Encoded URL.
+     */
+    public function punycodeUrl($url)
+    {
+        $parsed_url = parse_url($url);
+
+        $scheme = isset($parsed_url['scheme']) ? $parsed_url['scheme'] . '://' : '';
+        $host = isset($parsed_url['host']) ? idn_to_ascii($parsed_url['host'], IDNA_NONTRANSITIONAL_TO_ASCII, INTL_IDNA_VARIANT_UTS46) : '';
+        $port = isset($parsed_url['port']) ? ':' . $parsed_url['port'] : '';
+        $user = isset($parsed_url['user']) ? $parsed_url['user'] : '';
+        $pass = isset($parsed_url['pass']) ? ':' . $parsed_url['pass'] : '';
+        $pass = ($user || $pass) ? "$pass@" : '';
+        $path = isset($parsed_url['path']) ? $parsed_url['path'] : '';
+        $query = isset($parsed_url['query']) ? '?' . $parsed_url['query'] : '';
+
+        return $scheme . $user . $pass . $host . $port . $path . $query;
     }
 }
diff --git a/app/HeaderCheck.php b/app/HeaderCheck.php
new file mode 100644
index 0000000..f4aab7d
--- /dev/null
+++ b/app/HeaderCheck.php
@@ -0,0 +1,76 @@
+<?php
+
+namespace App;
+
+use App\Http\Requests\ScanStartRequest;
+use App\Ratings\ContentTypeRating;
+use App\Ratings\CSPRating;
+use App\Ratings\HPKPRating;
+use App\Ratings\HSTSRating;
+use App\Ratings\ReferrerPolicyRating;
+use App\Ratings\SetCookieRating;
+use App\Ratings\XContentTypeOptionsRating;
+use App\Ratings\XFrameOptionsRating;
+use App\Ratings\XXSSProtectionRating;
+use GuzzleHttp\Client;
+
+/**
+ * Returns a HeaderReport / Rating for the given URL.
+ */
+class HeaderCheck
+{
+    protected $response = null;
+
+    public function __construct(ScanStartRequest $request, Client $client = null)
+    {
+        $this->response = new HTTPResponse($request, $client);
+    }
+
+    public function report()
+    {
+        if ($this->response->hasErrors()) {
+            return [
+                'name'         => 'HEADER',
+                'version'      => file(base_path('VERSION'), FILE_IGNORE_NEW_LINES)[0],
+                'hasError'     => true,
+                'errorMessage' => TranslateableMessage::get('NO_HTTP_RESPONSE'),
+                'score'        => 0,
+                'tests'        => [],
+            ];
+        }
+
+        $ratings = collect([
+            new CSPRating($this->response),
+            new ContentTypeRating($this->response),
+            new HPKPRating($this->response),
+            new ReferrerPolicyRating($this->response),
+            new SetCookieRating($this->response),
+            new HSTSRating($this->response),
+            new XContentTypeOptionsRating($this->response),
+            new XFrameOptionsRating($this->response),
+            new XXSSProtectionRating($this->response),
+        ]);
+
+        // Calculating score as an average of the single scores WITHOUT 'bonus' or 'hidden' Ratings.
+        $score = 0;
+        $scoredRatings = 0;
+        foreach ($ratings as $rating) {
+            if ($rating->scoreType === 'bonus' || $rating->scoreType === 'hidden') {
+                continue;
+            }
+            $score += $rating->score;
+            $scoredRatings++;
+        }
+
+        $score = floor($score / $scoredRatings);
+
+        return [
+            'name'         => 'HEADER',
+            'version'      => file(base_path('VERSION'), FILE_IGNORE_NEW_LINES)[0],
+            'hasError'     => false,
+            'errorMessage' => null,
+            'score'        => $score,
+            'tests'        => $ratings,
+        ];
+    }
+}
diff --git a/app/HeaderReport.php b/app/HeaderReport.php
deleted file mode 100644
index f1cf46d..0000000
--- a/app/HeaderReport.php
+++ /dev/null
@@ -1,104 +0,0 @@
-<?php
-
-namespace App;
-
-/**
- * Returns a HeaderReport / Rating for the given URL.
- */
-class HeaderReport
-{
-    public $url;
-    public $siteRating = null;
-    public $comment = null;
-
-    public function __construct($url)
-    {
-        $this->url = $url;
-    }
-
-    public function getComment($header)
-    {
-        $header = strtolower($header);
-        switch ($header) {
-            case "content-security-policy":
-                return (new Ratings\CSPRating($this->url))->getComment();
-                break;
-            case "content-type":
-                return (new Ratings\ContentTypeRating($this->url))->getComment();
-                break;
-            case "public-key-pins":
-                return (new Ratings\HPKPRating($this->url))->getComment();
-                break;
-            case "strict-transport-security":
-                return (new Ratings\HSTSRating($this->url))->getComment();
-                break;
-            case "x-content-type-options":
-                return (new Ratings\XContentTypeOptionsRating($this->url))->getComment();
-                break;
-            case "x-frame-options":
-                return (new Ratings\XFrameOptionsRating($this->url))->getComment();
-                break;
-            case "x-xss-protection":
-                return (new Ratings\XXSSProtectionRating($this->url))->getComment();
-                break;
-        }
-    }
-
-    public function getHeader($header)
-    {
-        $header = strtolower($header);
-        switch ($header) {
-            case "content-security-policy":
-                return (new Ratings\CSPRating($this->url))->getHeader("content-security-policy");
-                break;
-            case "content-type":
-                return (new Ratings\ContentTypeRating($this->url))->getHeader("content-type");
-                break;
-            case "public-key-pins":
-                return (new Ratings\HPKPRating($this->url))->getHeader("public-key-pins");
-                break;
-            case "strict-transport-security":
-                return (new Ratings\HSTSRating($this->url))->getHeader("strict-transport-security");
-                break;
-            case "x-content-type-options":
-                return (new Ratings\XContentTypeOptionsRating($this->url))->getHeader("x-content-type-options");
-                    break;
-            case "x-frame-options":
-                return (new Ratings\XFrameOptionsRating($this->url))->getHeader("x-frame-options");
-                break;
-            case "x-xss-protection":
-                return (new Ratings\XXSSProtectionRating($this->url))->getHeader("x-xss-protection");
-                break;
-        }
-    }
-
-    public function getRating($header)
-    {
-        $header = strtolower($header);
-        switch ($header) {
-            case "content-security-policy":
-                return (new Ratings\CSPRating($this->url))->getRating();
-                break;
-            case "content-type":
-                return (new Ratings\ContentTypeRating($this->url))->getRating();
-                break;
-            case "public-key-pins":
-                return (new Ratings\HPKPRating($this->url))->getRating();
-                break;
-            case "strict-transport-security":
-                return (new Ratings\HSTSRating($this->url))->getRating();
-                break;
-            case "x-content-type-options":
-                return (new Ratings\XContentTypeOptionsRating($this->url))->getRating();
-                break;
-            case "x-frame-options":
-                return (new Ratings\XFrameOptionsRating($this->url))->getRating();
-                break;
-            case "x-xss-protection":
-                return (new Ratings\XXSSProtectionRating($this->url))->getRating();
-                break;
-            default:
-                return "ERROR";
-        }
-    }
-}
diff --git a/app/Http/Controllers/ApiController.php b/app/Http/Controllers/ApiController.php
index f5e44d9..585b2fa 100644
--- a/app/Http/Controllers/ApiController.php
+++ b/app/Http/Controllers/ApiController.php
@@ -2,82 +2,51 @@
 
 namespace App\Http\Controllers;
 
-use App\Crawler;
-use App\DomxssReport;
-use App\Jobs\CrawlerJob;
-use App\Jobs\GenerateFullReportJob;
-use App\HeaderReport;
-use Illuminate\Http\Request;
-use Illuminate\Support\Facades\Redis;
-use Illuminate\Support\Facades\URL;
+use App\DOMXSSCheck;
+use App\HeaderCheck;
+use App\Http\Requests\ScanStartRequest;
+use App\Jobs\DomxssScanJob;
+use App\Jobs\HeaderScanJob;
+use GuzzleHttp\Client;
+use Illuminate\Support\Facades\Log;
 
 class ApiController extends Controller
 {
-    /**
-     * Returns a very simple report for a single URL.
-     *
-     * @param Request $request
-     * @return \Illuminate\Support\Collection
-     */
-    public function headerReport(Request $request) {
-        $this->validate($request, [
-            'url' => 'required|url'
-        ]);
+    public function headerReport(ScanStartRequest $request)
+    {
+        if ($request->json('callbackurls')) {
+            HeaderScanJob::dispatch($request->all());
 
-        $report = new HeaderReport($request->input('url'));
-        return  collect([
-                'checks' => [
-                    'Content-Type' => [
-                        'result' => (strpos( $report->getRating("content-type"), 'C' ) !== false),
-                        'comment' => $report->getComment("content-type"),
-                        'directive' => $report->getHeader( 'content-type' )
-                    ],
-                    'Content-Security-Policy' => [
-                        'result' => (strpos( $report->getRating("content-security-policy"), 'C' ) !== false),
-                        'comment' => $report->getComment("content-security-policy"),
-                        'directive' => $report->getHeader( 'content-security-policy' )
-                    ],
-                    'Public-Key-Pins' => [
-                        'result' => (strpos( $report->getRating("public-key-pins"), 'C' ) !== false),
-                        'comment' => $report->getComment("public-key-pins"),
-                        'directive' => $report->getHeader( 'public-key-pins' )
-                    ],
-                    'Strict-Transport-Security' => [
-                        'result' => (strpos( $report->getRating("strict-transport-security"), 'C' ) !== false),
-                        'comment' => $report->getComment("strict-transport-security"),
-                        'directive' => $report->getHeader( 'strict-transport-security' )
-                    ],
-                    'X-Content-Type-Options' => [
-                        'result' => (strpos( $report->getRating("x-content-type-options"), 'C' ) !== false),
-                        'comment' => $report->getComment("x-content-type-options"),
-                        'directive' => $report->getHeader( 'x-content-type-options' )
-                    ],
-                    'X-Frame-Options' => [
-                        'result' => (strpos( $report->getRating("x-frame-options"), 'C' ) !== false),
-                        'comment' => $report->getComment("x-frame-options"),
-                        'directive' => $report->getHeader( 'x-frame-options' )
-                    ],
-                    'X-Xss-Protection' => [
-                        'result' => (strpos( $report->getRating("x-xss-protection"), 'C' ) !== false),
-                        'comment' => $report->getComment("x-xss-protection"),
-                        'directive' => $report->getHeader( 'x-xss-protection' )
-                    ]
-                ]
-            ]);
+            return 'OK';
+        }
+
+        return response()->json((new HeaderCheck($request))->report());
     }
 
+    public function domxssReport(ScanStartRequest $request)
+    {
+        if ($request->json('callbackurls')) {
+            DomxssScanJob::dispatch($request->all());
+
+            return 'OK';
+        }
 
-    public function domxssReport(Request $request){
-        $this->validate($request, [
-            'url' => 'required|url'
-        ]);
-        $report = new DomxssReport($request->url);
-        return [
-            'checks' => [
-                'sinks' => ! $report->hasSinks(),
-                'sources' => ! $report->hasSources()
-            ]
-        ];
+        return response()->json((new DOMXSSCheck($request))->report());
     }
 
-}
\ No newline at end of file
+    public static function notifyCallbacks(array $callbackurls, $report)
+    {
+        foreach ($callbackurls as $url) {
+            try {
+                $client = new Client();
+                $client->request('POST', $url, [
+                    'http_errors' => false,
+                    'timeout'     => 60,
+                    'json'        => $report,
+                ]);
+            } catch (\Exception $e) {
+                Log::warning('Could not send the report to the following callback url: ' . $url);
+            }
+        }
+    }
+}
diff --git a/app/Http/Controllers/Auth/RegisterController.php b/app/Http/Controllers/Auth/RegisterController.php
index 34c376c..a57d6d3 100644
--- a/app/Http/Controllers/Auth/RegisterController.php
+++ b/app/Http/Controllers/Auth/RegisterController.php
@@ -2,10 +2,10 @@
 
 namespace App\Http\Controllers\Auth;
 
-use App\User;
-use Validator;
 use App\Http\Controllers\Controller;
+use App\User;
 use Illuminate\Foundation\Auth\RegistersUsers;
+use Validator;
 
 class RegisterController extends Controller
 {
@@ -42,14 +42,15 @@ public function __construct()
     /**
      * Get a validator for an incoming registration request.
      *
-     * @param  array  $data
+     * @param array $data
+     *
      * @return \Illuminate\Contracts\Validation\Validator
      */
     protected function validator(array $data)
     {
         return Validator::make($data, [
-            'name' => 'required|max:255',
-            'email' => 'required|email|max:255|unique:users',
+            'name'     => 'required|max:255',
+            'email'    => 'required|email|max:255|unique:users',
             'password' => 'required|min:6|confirmed',
         ]);
     }
@@ -57,14 +58,15 @@ protected function validator(array $data)
     /**
      * Create a new user instance after a valid registration.
      *
-     * @param  array  $data
+     * @param array $data
+     *
      * @return User
      */
     protected function create(array $data)
     {
         return User::create([
-            'name' => $data['name'],
-            'email' => $data['email'],
+            'name'     => $data['name'],
+            'email'    => $data['email'],
             'password' => bcrypt($data['password']),
         ]);
     }
diff --git a/app/Http/Controllers/Controller.php b/app/Http/Controllers/Controller.php
index 03e02a2..a0a2a8a 100644
--- a/app/Http/Controllers/Controller.php
+++ b/app/Http/Controllers/Controller.php
@@ -2,10 +2,10 @@
 
 namespace App\Http\Controllers;
 
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
 use Illuminate\Foundation\Bus\DispatchesJobs;
-use Illuminate\Routing\Controller as BaseController;
 use Illuminate\Foundation\Validation\ValidatesRequests;
-use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+use Illuminate\Routing\Controller as BaseController;
 
 class Controller extends BaseController
 {
diff --git a/app/Http/Controllers/FrontendController.php b/app/Http/Controllers/FrontendController.php
deleted file mode 100644
index 738c46e..0000000
--- a/app/Http/Controllers/FrontendController.php
+++ /dev/null
@@ -1,26 +0,0 @@
-<?php
-
-namespace App\Http\Controllers;
-
-class FrontendController extends Controller
-{
-    /**
-     * Return frontend.
-     */
-    public function index() {
-        return view('start');
-    }
-
-    /**
-     * jsConfig for the frontend.
-     *
-     * @return array with settings.
-     */
-    public function jsConfig() {
-        return [
-            'LIMIT' => env("LIMIT", 100),
-            'HOST_IP' => exec("/sbin/ip route|awk '/default/ { print $3 }'")
-        ];
-    }
-
-}
\ No newline at end of file
diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php
index 1bc77f6..4741adc 100644
--- a/app/Http/Kernel.php
+++ b/app/Http/Kernel.php
@@ -3,8 +3,6 @@
 namespace App\Http;
 
 use Illuminate\Foundation\Http\Kernel as HttpKernel;
-use Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull;
-use Illuminate\Foundation\Http\Middleware\ValidatePostSize;
 
 class Kernel extends HttpKernel
 {
@@ -39,7 +37,6 @@ class Kernel extends HttpKernel
         ],
 
         'api' => [
-            'throttle:60,1',
             'bindings',
         ],
     ];
@@ -52,11 +49,11 @@ class Kernel extends HttpKernel
      * @var array
      */
     protected $routeMiddleware = [
-        'auth' => \Illuminate\Auth\Middleware\Authenticate::class,
+        'auth'       => \Illuminate\Auth\Middleware\Authenticate::class,
         'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
-        'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class,
-        'can' => \Illuminate\Auth\Middleware\Authorize::class,
-        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
-        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
+        'bindings'   => \Illuminate\Routing\Middleware\SubstituteBindings::class,
+        'can'        => \Illuminate\Auth\Middleware\Authorize::class,
+        'guest'      => \App\Http\Middleware\RedirectIfAuthenticated::class,
+        'throttle'   => \Illuminate\Routing\Middleware\ThrottleRequests::class,
     ];
 }
diff --git a/app/Http/Middleware/RedirectIfAuthenticated.php b/app/Http/Middleware/RedirectIfAuthenticated.php
index e4cec9c..afe1c26 100644
--- a/app/Http/Middleware/RedirectIfAuthenticated.php
+++ b/app/Http/Middleware/RedirectIfAuthenticated.php
@@ -10,9 +10,10 @@ class RedirectIfAuthenticated
     /**
      * Handle an incoming request.
      *
-     * @param  \Illuminate\Http\Request  $request
-     * @param  \Closure  $next
-     * @param  string|null  $guard
+     * @param \Illuminate\Http\Request $request
+     * @param \Closure                 $next
+     * @param string|null              $guard
+     *
      * @return mixed
      */
     public function handle($request, Closure $next, $guard = null)
diff --git a/app/Http/Middleware/SetLocaleMiddleware.php b/app/Http/Middleware/SetLocaleMiddleware.php
index d15fb78..ef1b1a3 100644
--- a/app/Http/Middleware/SetLocaleMiddleware.php
+++ b/app/Http/Middleware/SetLocaleMiddleware.php
@@ -10,21 +10,20 @@ class SetLocaleMiddleware
     /**
      * Handle an incoming request.
      *
-     * @param  \Illuminate\Http\Request  $request
-     * @param  \Closure  $next
+     * @param \Illuminate\Http\Request $request
+     * @param \Closure                 $next
+     *
      * @return mixed
      */
     public function handle($request, Closure $next)
     {
-
-        if($request->has('locale')) {
-
-            $validator = Validator::make( $request->all(), [
-                'locale' => 'string|size:2'
-            ] );
+        if ($request->has('locale')) {
+            $validator = Validator::make($request->all(), [
+                'locale' => 'string|size:2',
+            ]);
 
             if (!$validator->fails()) {
-                \App::setLocale( $request->input( 'locale' ) );
+                \App::setLocale($request->input('locale'));
             }
         }
 
diff --git a/app/Http/Requests/ReportRequest.php b/app/Http/Requests/ReportRequest.php
deleted file mode 100644
index 488951e..0000000
--- a/app/Http/Requests/ReportRequest.php
+++ /dev/null
@@ -1,39 +0,0 @@
-<?php
-
-namespace App\Http\Requests;
-
-use Illuminate\Foundation\Http\FormRequest;
-
-class ReportRequest extends FormRequest
-{
-    /**
-     * Determine if the user is authorized to make this request.
-     *
-     * @return bool
-     */
-    public function authorize()
-    {
-        return true;
-    }
-
-    /**
-     * Get the validation rules that apply to the request.
-     *
-     * @return array
-     */
-    public function rules()
-    {
-
-        return [
-            'url' => 'required|url',
-            'proxy' => 'boolean',
-            'proxyAddress' => 'required_with:proxy',
-            'ignoreTLS' => 'boolean',
-            'limitOn' => 'boolean',
-            'limit' => 'required_with:limitOn|numeric|min:1',
-            'doNotCrawl' => 'boolean',
-            'scan.custom' => 'boolean',
-            'scan.customJson' => 'required_with:scan.custom'
-        ];
-    }
-}
diff --git a/app/Http/Requests/ScanStartRequest.php b/app/Http/Requests/ScanStartRequest.php
new file mode 100644
index 0000000..f2e11f4
--- /dev/null
+++ b/app/Http/Requests/ScanStartRequest.php
@@ -0,0 +1,34 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class ScanStartRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     *
+     * @return bool
+     */
+    public function authorize()
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array
+     */
+    public function rules()
+    {
+        return [
+            'url'            => 'required|url',
+            'dangerLevel'    => 'integer|min:0|max:10',
+            'callbackurls'   => 'array',
+            'callbackurls.*' => 'url',
+            'userAgent'      => 'string',
+        ];
+    }
+}
diff --git a/app/Jobs/DomxssScanJob.php b/app/Jobs/DomxssScanJob.php
new file mode 100644
index 0000000..b9de417
--- /dev/null
+++ b/app/Jobs/DomxssScanJob.php
@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Jobs;
+
+use App\DOMXSSCheck;
+use App\Http\Controllers\ApiController;
+use App\Http\Requests\ScanStartRequest;
+use Illuminate\Bus\Queueable;
+use Illuminate\Contracts\Queue\ShouldQueue;
+use Illuminate\Foundation\Bus\Dispatchable;
+use Illuminate\Queue\InteractsWithQueue;
+use Illuminate\Queue\SerializesModels;
+
+class DomxssScanJob implements ShouldQueue
+{
+    protected $request;
+
+    use Dispatchable, InteractsWithQueue, Queueable, SerializesModels;
+
+    /**
+     * Create a new job instance.
+     *
+     * @return void
+     */
+    public function __construct($request)
+    {
+        $this->request = new ScanStartRequest($request);
+    }
+
+    /**
+     * Execute the job.
+     *
+     * @return void
+     */
+    public function handle()
+    {
+        $report = (new DOMXSSCheck($this->request))->report();
+        ApiController::notifyCallbacks($this->request->get('callbackurls'), $report);
+    }
+}
diff --git a/app/Jobs/HeaderScanJob.php b/app/Jobs/HeaderScanJob.php
new file mode 100644
index 0000000..b081056
--- /dev/null
+++ b/app/Jobs/HeaderScanJob.php
@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Jobs;
+
+use App\HeaderCheck;
+use App\Http\Controllers\ApiController;
+use App\Http\Requests\ScanStartRequest;
+use Illuminate\Bus\Queueable;
+use Illuminate\Contracts\Queue\ShouldQueue;
+use Illuminate\Foundation\Bus\Dispatchable;
+use Illuminate\Queue\InteractsWithQueue;
+use Illuminate\Queue\SerializesModels;
+
+class HeaderScanJob implements ShouldQueue
+{
+    protected $request;
+
+    use Dispatchable, InteractsWithQueue, Queueable, SerializesModels;
+
+    /**
+     * Create a new job instance.
+     *
+     * @return void
+     */
+    public function __construct($request)
+    {
+        $this->request = new ScanStartRequest($request);
+    }
+
+    /**
+     * Execute the job.
+     *
+     * @return void
+     */
+    public function handle()
+    {
+        $report = (new HeaderCheck($this->request))->report();
+        ApiController::notifyCallbacks($this->request->get('callbackurls'), $report);
+    }
+}
diff --git a/app/Providers/AuthServiceProvider.php b/app/Providers/AuthServiceProvider.php
index 9784b1a..9e68caa 100644
--- a/app/Providers/AuthServiceProvider.php
+++ b/app/Providers/AuthServiceProvider.php
@@ -2,7 +2,6 @@
 
 namespace App\Providers;
 
-use Illuminate\Support\Facades\Gate;
 use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
 
 class AuthServiceProvider extends ServiceProvider
diff --git a/app/Providers/BroadcastServiceProvider.php b/app/Providers/BroadcastServiceProvider.php
index 1dcf8d2..dc3007b 100644
--- a/app/Providers/BroadcastServiceProvider.php
+++ b/app/Providers/BroadcastServiceProvider.php
@@ -2,8 +2,8 @@
 
 namespace App\Providers;
 
-use Illuminate\Support\ServiceProvider;
 use Illuminate\Support\Facades\Broadcast;
+use Illuminate\Support\ServiceProvider;
 
 class BroadcastServiceProvider extends ServiceProvider
 {
diff --git a/app/Providers/EventServiceProvider.php b/app/Providers/EventServiceProvider.php
index a182657..f5d8b87 100644
--- a/app/Providers/EventServiceProvider.php
+++ b/app/Providers/EventServiceProvider.php
@@ -2,8 +2,8 @@
 
 namespace App\Providers;
 
-use Illuminate\Support\Facades\Event;
 use Illuminate\Foundation\Support\Providers\EventServiceProvider as ServiceProvider;
+use Illuminate\Support\Facades\Event;
 
 class EventServiceProvider extends ServiceProvider
 {
diff --git a/app/Providers/RouteServiceProvider.php b/app/Providers/RouteServiceProvider.php
index 87ffb05..6d5ab1b 100644
--- a/app/Providers/RouteServiceProvider.php
+++ b/app/Providers/RouteServiceProvider.php
@@ -2,8 +2,8 @@
 
 namespace App\Providers;
 
-use Illuminate\Support\Facades\Route;
 use Illuminate\Foundation\Support\Providers\RouteServiceProvider as ServiceProvider;
+use Illuminate\Support\Facades\Route;
 
 class RouteServiceProvider extends ServiceProvider
 {
@@ -53,7 +53,7 @@ protected function mapWebRoutes()
     {
         Route::group([
             'middleware' => 'web',
-            'namespace' => $this->namespace,
+            'namespace'  => $this->namespace,
         ], function ($router) {
             require base_path('routes/web.php');
         });
@@ -70,8 +70,8 @@ protected function mapApiRoutes()
     {
         Route::group([
             'middleware' => 'api',
-            'namespace' => $this->namespace,
-            'prefix' => 'api',
+            'namespace'  => $this->namespace,
+            'prefix'     => 'api',
         ], function ($router) {
             require base_path('routes/api.php');
         });
diff --git a/app/Ratings/CSPRating.php b/app/Ratings/CSPRating.php
index 9813538..78fe01a 100644
--- a/app/Ratings/CSPRating.php
+++ b/app/Ratings/CSPRating.php
@@ -2,53 +2,74 @@
 
 namespace App\Ratings;
 
+use App\CSPParser;
+use App\HTTPResponse;
+use App\TranslateableMessage;
+
 class CSPRating extends Rating
 {
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'CONTENT_SECURITY_POLICY';
+        $this->scoreType = 'warning';
+
+        parent::__construct($response);
+    }
+
     protected function rate()
     {
         $header = $this->getHeader('content-security-policy');
 
         if ($header === null) {
-            $this->rating   = 'C';
-            $this->comment  = __('The header is not set.');
-        } elseif (count($header) > 1) {
-            $this->rating   = 'C';
-            $this->comment  = __('The header is set multiple times.');
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_NOT_SET');
+        } elseif ($header === 'ERROR') {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_ENCODING_ERROR', ['HEADER_NAME' => 'Content-Security-Policy']);
+        } elseif (is_array($header) && count($header) > 1) {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_SET_MULTIPLE_TIMES');
         } else {
             $header = $header[0];
+            $csp = new CSPParser($header);
 
-            if (strpos($header, 'unsafe-inline') !== false || strpos($header, 'unsafe-eval') !== false) {
-                $this->rating   = 'C';
-                $this->comment  = __('The header contains "unsafe-inline" or "unsafe-eval" directives.');
-            } elseif (strpos($header, 'unsafe-inline') === false && strpos($header, 'unsafe-eval') === false && strpos($header, "default-src 'none'") === false) {
-                $this->rating   = 'B';
-                $this->comment  = __('The header is free of any "unsafe-" directives.');
-            } elseif (strpos($header, 'unsafe-inline') === false && strpos($header, 'unsafe-eval') === false && strpos($header, "default-src 'none'") !== false) {
-                $this->rating   = 'A';
-                $this->comment  = __('The header is "unsafe-" free and includes "default-src \'none\'"');
+            if (!$csp->isValid()) {
+                $this->score = 0;
+                $this->hasError = true;
+                $this->errorMessage = TranslateableMessage::get('CSP_IS_NOT_VALID');
+            } elseif ($csp->containsUnsafeValues()) {
+                $this->score = 50;
+                $this->testDetails->push(TranslateableMessage::get('CSP_UNSAFE_INCLUDED'));
+                $this->scoreType = 'info';
+            } elseif (!$csp->directives->has('default-src')) {
+                $this->score = 0;
+                $this->testDetails->push(TranslateableMessage::get('CSP_DEFAULT_SRC_MISSING'));
+                $this->scoreType = 'info';
+            } elseif (!$csp->containsUnsafeValues() && !$csp->directives->get('default-src')->contains(function ($value, $key) {
+                return ($value === "'self'") || ($value === "'none'");
+            })) {
+                $this->score = 75;
+                $this->scoreType = 'info';
+                $this->testDetails->push(TranslateableMessage::get('CSP_NO_UNSAFE_INCLUDED'));
+            } elseif (!$csp->containsUnsafeValues() && $csp->directives->get('default-src')->contains(function ($value, $key) {
+                return ($value === "'self'") || ($value === "'none'");
+            })) {
+                $this->score = 100;
+                $this->scoreType = 'success';
+                $this->testDetails->push(TranslateableMessage::get('CSP_CORRECT'));
             }
         }
 
         // Check if legacy header is available
-        if (count($this->getHeader("x-content-security-policy")) > 0) {
-            $this->comment .= '\n' . __('The legacy header "X-Content-Security-Policy" (that is only used for IE11 with CSP v.1) is set. The new and standardized header is Content-Security-Policy.');
+        $legacyHeader = $this->getHeader('X-Content-Security-Policy');
+        if (is_array($legacyHeader) && count($legacyHeader) > 0) {
+            $this->testDetails->push(TranslateableMessage::get('CSP_LEGACY_HEADER_SET', ['HEADER_NAME' => 'X-Content-Security-Policy']));
         }
-    }
 
-
-    public static function getDescription()
-    {
-        // OWASP Secure Headers Project
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#Content-Security-Policy
-        // TODO: Translate
-        return __('Content Security Policy (CSP) requires careful tuning and precise definition of the policy. If enabled, CSP has significant impact on the way browser renders pages (e.g., inline JavaScript disabled by default and must be explicitly allowed in policy). CSP prevents a wide range of attacks, including Cross-site scripting and other cross-site injections.');
-    }
-
-    public static function getBestPractice()
-    {
-        // Mozilla Observatory
-        // https://github.com/mozilla/http-observatory/blob/master/httpobs/docs/scoring.md
-        // TODO: Translate
-        return __('Best Practice is to use the CSP with "default-src \'none\'" and without any \'unsafe-eval\' or \'unsafe-inline\' directives');
+        // Check if legacy header X-WebKit-CSP is available
+        $legacyHeader = $this->getHeader('X-WebKit-CSP');
+        if (is_array($legacyHeader) && count($legacyHeader) > 0) {
+            $this->testDetails->push(TranslateableMessage::get('CSP_LEGACY_HEADER_SET', ['HEADER_NAME' => 'X-WebKit-CSP']));
+        }
     }
 }
diff --git a/app/Ratings/ContentTypeRating.php b/app/Ratings/ContentTypeRating.php
index 9afb43b..fd270bd 100644
--- a/app/Ratings/ContentTypeRating.php
+++ b/app/Ratings/ContentTypeRating.php
@@ -2,96 +2,93 @@
 
 namespace App\Ratings;
 
+use App\HTTPResponse;
+use App\TranslateableMessage;
 use voku\helper\HtmlDomParser;
 
 class ContentTypeRating extends Rating
 {
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'CONTENT_TYPE';
+        $this->scoreType = 'warning';
+
+        parent::__construct($response);
+    }
+
     protected function rate()
     {
         $header = $this->getHeader('content-type');
 
         if ($header === null) {
-            $this->rating = 'C';
-            $this->comment  = __('The header is not set.');
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_NOT_SET');
 
             $this->checkMetaTag();
-        } elseif (count($header) > 1) {
-            $this->rating = 'C';
-            $this->comment  = __('The header is set multiple times.');
+        } elseif ($header === 'ERROR') {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_ENCODING_ERROR', ['HEADER_NAME' => 'Content-Type']);
+        } elseif (is_array($header) && count($header) > 1) {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_SET_MULTIPLE_TIMES');
         } else {
-            $this->rating = 'C';
-            $this->comment = __('The header is set without the charset.');
-
-            $this->checkMetaTag();
+            $detail = 'CT_HEADER_WITHOUT_CHARSET';
 
             $header = $header[0];
 
             if (stripos($header, 'charset=') !== false) {
-                $this->rating = 'B';
-                $this->comment = __('The header is set with the charset.');
+                $this->score = 50;
+                $detail = 'CT_HEADER_WITH_CHARSET';
+
+                // HASEGAWA
+                // http://openmya.hacker.jp/hasegawa/public/20071107/s6/h6.html?file=datae.txt
+                if ((stripos($header, 'utf8') !== false) || (stripos($header, 'Windows-31J') !== false) || (stripos($header, 'CP932') !== false) || (stripos($header, 'MS932') !== false) || (stripos($header, 'MS942C') !== false) || (stripos($header, 'sjis') !== false) || (stripos($header, 'jis') !== false)) {
+                    $this->score = 0;
+                    $detail = 'CT_WRONG_CHARSET';
+                }
             }
 
             if (stripos($header, 'charset=utf-8') !== false) {
-                $this->rating = 'A';
-                $this->comment = __('The header is set with the charset and follows the best practice.');
+                $this->score = 100;
+                $this->scoreType = 'success';
+                $detail = 'CT_CORRECT';
             }
 
-            // HASEGAWA
-            // http://openmya.hacker.jp/hasegawa/public/20071107/s6/h6.html?file=datae.txt
-            elseif (stripos($header, 'utf8') !== false) {
-                $this->rating = 'C';
-                $this->comment = __('The given charset is wrong and thereby ineffective.') . __('The correct writing is: charset=utf-8');
-            } elseif (
-                (stripos($header, 'Windows-31J') !== false) ||
-                (stripos($header, 'CP932') !== false) ||
-                (stripos($header, 'MS932') !== false) ||
-                (stripos($header, 'MS942C') !== false) ||
-                (stripos($header, 'sjis') !== false) ||
-                (stripos($header, 'jis') !== false)
-            ) {
-                $this->rating = 'C';
-                $this->comment = __('The given charset is wrong and thereby ineffective.') . __('Best practice is: charset=utf-8');
-            }
+            $this->testDetails->push(TranslateableMessage::get($detail));
         }
     }
 
-    public static function getDescription()
-    {
-        // W3C
-        // https://www.w3.org/International/articles/http-charset/index.en
-        // TODO: Translate
-        return __('When a server sends a document to a user agent (eg. a browser) it also sends information in the Content-Type field of the accompanying HTTP header about what type of data format this is. This information is expressed using a MIME type label. Documents transmitted with HTTP that are of type text, such as text/html, text/plain, etc., can send a charset parameter in the HTTP header to specify the character encoding of the document.');
-    }
-
-    public static function getBestPractice()
-    {
-        // W3C
-        // https://www.w3.org/International/articles/http-charset/index.en
-        return 'text/html; charset=utf-8';
-    }
-
     protected function checkMetaTag()
     {
         $dom = HtmlDomParser::str_get_html($this->response->body());
+        $detailMeta = null;
 
         // case: <meta charset="utf-8">
-        if ($finding = $dom->find('meta[charset]')) {
-            $this->comment .= __(' A meta tag is set with a charset.');
+        $finding = $dom->find('meta[charset]');
+        if (count($finding) > 0) {
+            $this->score = 30;
+            $detailMeta = 'CT_META_TAG_SET';
 
             if (stripos($finding[0]->charset, 'utf-8') !== false) {
-                $this->rating = 'B';
-                $this->comment .= __(' A meta tag is set with a charset and follows the best practice.');
+                $this->score = 60;
+                $detailMeta = 'CT_META_TAG_SET_CORRECT';
             }
+
+            $this->testDetails->push(TranslateableMessage::get($detailMeta, ['META' => $finding[0]->__toString()]));
         }
+
         // case: <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
-        elseif ($finding = $dom->find('meta[http-equiv=Content-Type]')) {
+        $finding = $dom->find('meta[http-equiv=Content-Type]');
+        if (count($finding)) {
+            $detailMeta = 'CT_META_TAG_SET';
+            $this->score = 30;
+
             if (stripos($finding[0]->content, 'charset=utf-8') !== false) {
-                $this->rating = 'A';
-                $this->comment .= __(' A meta tag is set with a charset and follows the best practice.');
-            } elseif (stripos($finding[0]->content, 'charset=') !== false) {
-                $this->rating = 'B';
-                $this->comment .= __(' A meta tag is set with a charset.');
+                $this->score = 60;
+                $detailMeta = 'CT_META_TAG_SET_CORRECT';
             }
+
+            $this->testDetails->push(TranslateableMessage::get($detailMeta, ['META' => $finding[0]->__toString()]));
         }
     }
 }
diff --git a/app/Ratings/HPKPRating.php b/app/Ratings/HPKPRating.php
index ab0013b..4ded72c 100644
--- a/app/Ratings/HPKPRating.php
+++ b/app/Ratings/HPKPRating.php
@@ -2,18 +2,32 @@
 
 namespace App\Ratings;
 
+use App\HTTPResponse;
+use App\TranslateableMessage;
+
 class HPKPRating extends Rating
 {
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'PUBLIC_KEY_PINS';
+        $this->scoreType = 'hidden';
+
+        parent::__construct($response);
+    }
+
     protected function rate()
     {
         $header = $this->getHeader('public-key-pins');
 
         if ($header === null) {
-            $this->rating   = 'C';
-            $this->comment  = __('The header is not set.');
-        } elseif (count($header) > 1) {
-            $this->rating   = 'C';
-            $this->comment  = __('The header is set multiple times.');
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_NOT_SET');
+        } elseif ($header === 'ERROR') {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_ENCODING_ERROR', ['HEADER_NAME' => 'Public-Key-Pins']);
+        } elseif (is_array($header) && count($header) > 1) {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_SET_MULTIPLE_TIMES');
         } else {
             $header = $header[0];
 
@@ -26,41 +40,25 @@ protected function rate()
 
             $maxAge = substr($header, $beginAge, $endAge - $beginAge);
 
+            $this->score = 100;
+
             if ($maxAge < 1296000) {
-                $this->rating   = 'B';
-                $this->comment  = __('The keys are pinned for less than 15 days.');
+                $this->testDetails->push(TranslateableMessage::get('HPKP_LESS_15'));
             } elseif ($maxAge >= 1296000) {
-                $this->rating   = 'A';
-                $this->comment  = __('The keys are pinned for more than 15 days.');
+                $this->testDetails->push(TranslateableMessage::get('HPKP_MORE_15'));
             } else {
-                $this->rating   = 'C';
-                $this->comment  = __('An error occured while checking "max-age".');
+                $this->score = 0;
+                $this->hasError = true;
+                $this->errorMessage = TranslateableMessage::get('MAX_AGE_ERROR');
             }
 
             if (strpos($header, 'includeSubDomains') !== false) {
-                $this->rating   .= '+';
-                $this->comment  .= '\n' . __('"includeSubDomains" is set.');
+                $this->testDetails->push(TranslateableMessage::get('INCLUDE_SUBDOMAINS'));
             }
 
             if (strpos($header, 'report-uri') !== false) {
-                $this->rating   .= '+';
-                $this->comment  .= '\n' . __('A report-uri is set.');
+                $this->testDetails->push(TranslateableMessage::get('HPKP_REPORT_URI'));
             }
         }
     }
-
-    public static function getDescription()
-    {
-        // OWASP Secure Headers Project
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#Public_Key_Pinning_Extension_for_HTTP_.28HPKP.29
-        // TODO: Translate
-        return 'HTTP Public Key Pinning (HPKP) is a security mechanism which allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates. (For example, sometimes attackers can compromise certificate authorities, and then can mis-issue certificates for a web origin.).';
-    }
-
-    public static function getBestPractice()
-    {
-        // OWASP Secure Headers Prorject
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#hpkp
-        return 'pin-sha256="<HASH>"; pin-sha256="<HASH>"; max-age=2592000; includeSubDomains';
-    }
 }
diff --git a/app/Ratings/HSTSRating.php b/app/Ratings/HSTSRating.php
index c9e9c5c..b07974f 100644
--- a/app/Ratings/HSTSRating.php
+++ b/app/Ratings/HSTSRating.php
@@ -2,66 +2,65 @@
 
 namespace App\Ratings;
 
+use App\HTTPResponse;
+use App\TranslateableMessage;
+
 class HSTSRating extends Rating
 {
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'STRICT_TRANSPORT_SECURITY';
+        $this->scoreType = 'warning';
+
+        parent::__construct($response);
+    }
+
     protected function rate()
     {
         $header = $this->getHeader('strict-transport-security');
 
         if ($header === null) {
-            $this->rating   = 'C';
-            $this->comment  = __('The header is not set.');
-        } elseif (count($header) > 1) {
-            $this->rating   = 'C';
-            $this->comment  = __('The header is set multiple times.');
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_NOT_SET');
+        } elseif ($header === 'ERROR') {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_ENCODING_ERROR', ['HEADER_NAME' => 'Strict-Transport-Security']);
+        } elseif (is_array($header) && count($header) > 1) {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_SET_MULTIPLE_TIMES');
         } else {
             $header = $header[0];
 
-            $beginAge   = strpos($header, 'max-age=') + 8;
-            $endAge     = strpos($header, ';', $beginAge);
+            $beginAge = strpos($header, 'max-age=') + 8;
+            $endAge = strpos($header, ';', $beginAge);
 
             // if there is no semicolon | max-age=300
             if ($endAge === false) {
                 $endAge = strlen($header);
             }
 
-            $maxAge     = substr($header, $beginAge, $endAge - $beginAge);
+            $maxAge = substr($header, $beginAge, $endAge - $beginAge);
 
             if ($maxAge < 15768000) {
-                $this->rating   = 'B';
-                $this->comment  = __('The value for "max-age" is smaller than 6 months.');
+                $this->score = 60;
+                $this->testDetails->push(TranslateableMessage::get('HSTS_LESS_6'));
             } elseif ($maxAge >= 15768000) {
-                $this->rating   = 'A';
-                $this->comment  = __('The value for "max-age" is greater than 6 months.');
+                $this->score = 100;
+                $this->scoreType = 'success';
+                $this->testDetails->push(TranslateableMessage::get('HSTS_MORE_6'));
             } else {
-                $this->rating   = 'C';
-                $this->comment  = __('An error occured while checking "max-age".');
+                $this->score = 0;
+                $this->hasError = true;
+                $this->errorMessage = TranslateableMessage('MAX_AGE_ERROR');
             }
-        }
 
-        if (strpos($header, 'includeSubDomains') !== false) {
-            $this->rating   .= '+';
-            $this->comment  .= '\n' . __('"includeSubDomains" is set.');
-        }
+            if (strpos($header, 'includeSubDomains') !== false) {
+                $this->testDetails->push(TranslateableMessage::get('INCLUDE_SUBDOMAINS'));
+            }
 
-        if (strpos($header, 'preload') !== false) {
-            $this->rating   .= '+';
-            $this->comment  .= '\n' . __('"preload" is set.');
+            if (strpos($header, 'preload') !== false) {
+                $this->testDetails->push(TranslateableMessage::get('HSTS_PRELOAD'));
+            }
         }
     }
-
-    public static function getDescription()
-    {
-        // OWASP Secure Headers Project
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#HTTP_Strict_Transport_Security_.28HSTS.29
-        // TODO: Translate
-        return 'HTTP Strict Transport Security (HSTS) is a web security policy mechanism which helps to protect websites against protocol downgrade attacks and cookie hijacking. It allows web servers to declare that web browsers (or other complying user agents) should only interact with it using secure HTTPS connections, and never via the insecure HTTP protocol.';
-    }
-
-    public static function getBestPractice()
-    {
-        // OWASP Best Practice
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#hsts
-        return 'max-age=63072000; includeSubdomains';
-    }
 }
diff --git a/app/Ratings/Rating.php b/app/Ratings/Rating.php
index e24bb31..2a54480 100644
--- a/app/Ratings/Rating.php
+++ b/app/Ratings/Rating.php
@@ -3,63 +3,44 @@
 namespace App\Ratings;
 
 use App\HTTPResponse;
-use GuzzleHttp\Client;
+use voku\helper\HtmlDomParser;
 
-abstract class Rating implements RatingInterface, \JsonSerializable
+abstract class Rating
 {
-    protected $url;
-    public $response;
-    protected $rating = 'C';
-    protected $comment = 'An error occurred.';
+    protected $response;
+
+    public $name = null;
+    public $hasError = false;
+    public $errorMessage = null;
+    public $score = 0;
+    public $scoreType = null;
+    public $testDetails = null;
 
     /**
      * Rating constructor.
-     * @param $url
-     * @param Client $client
      */
-    public function __construct($url, Client $client = null)
+    public function __construct(HTTPResponse $response)
     {
-        $this->url = $url;
+        $this->response = $response;
+        $this->testDetails = collect();
 
-        $this->response = new HTTPResponse($this->url, $client);
         $this->rate();
     }
 
-    public function url()
-    {
-        return $this->url;
-    }
-
     public function getHeader($header)
     {
-        return $this->response->header($header);
-    }
+        $result = $this->response->header($header);
 
-    /**
-     * @return string
-     */
-    public function getRating()
-    {
-        return $this->rating;
-    }
-
-    /**
-     * @return string
-     */
-    public function getComment()
-    {
-        return $this->comment;
+        return json_encode($result) ? $result : 'ERROR';
     }
 
     /**
-     * Specify data which should be serialized to JSON
-     * @link http://php.net/manual/en/jsonserializable.jsonserialize.php
-     * @return mixed data which can be serialized by <b>json_encode</b>,
-     * which is a value of any type other than a resource.
-     * @since 5.4.0
+     * Return the HTML-Content of a site as a SimpleHtmlDom or false.
+     *
+     * @return bool|voku\helper\SimpleHtmlDom
      */
-    public function jsonSerialize()
+    public function getBody()
     {
-        return ["rating" => $this->getRating(), "comment" => $this->comment];
+        return HtmlDomParser::str_get_html($this->response->body());
     }
 }
diff --git a/app/Ratings/RatingInterface.php b/app/Ratings/RatingInterface.php
deleted file mode 100644
index 5d9d7fb..0000000
--- a/app/Ratings/RatingInterface.php
+++ /dev/null
@@ -1,13 +0,0 @@
-<?php
-
-namespace App\Ratings;
-
-interface RatingInterface
-{
-    public function __construct($url);
-    public static function getDescription();
-    public static function getBestPractice();
-    public function getHeader($header);
-    public function getRating();
-    public function getComment();
-}
diff --git a/app/Ratings/ReferrerPolicyRating.php b/app/Ratings/ReferrerPolicyRating.php
new file mode 100644
index 0000000..837b3aa
--- /dev/null
+++ b/app/Ratings/ReferrerPolicyRating.php
@@ -0,0 +1,70 @@
+<?php
+
+namespace App\Ratings;
+
+use App\HTTPResponse;
+use App\TranslateableMessage;
+
+class ReferrerPolicyRating extends Rating
+{
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'REFERRER_POLICY';
+        $this->scoreType = 'warning';
+
+        parent::__construct($response);
+    }
+
+    protected function rate()
+    {
+        $header = $this->getHeader('referrer-policy');
+
+        if ($header === null) {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_NOT_SET');
+        } elseif ($header === 'ERROR') {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_ENCODING_ERROR', ['HEADER_NAME' => 'Referrer-Policy']);
+        } elseif (is_array($header) && count($header) > 1) {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_SET_MULTIPLE_TIMES');
+        } else {
+            $header = $header[0];
+
+            if ($header == 'no-referrer') {
+                $this->score = 100;
+                $this->testDetails->push(TranslateableMessage::get('DIRECTIVE_SET', ['DIRECTIVE' => 'no-referrer']));
+                $this->scoreType = 'success';
+            } elseif ($header == 'same-origin') {
+                $this->score = 100;
+                $this->testDetails->push(TranslateableMessage::get('DIRECTIVE_SET', ['DIRECTIVE' => 'same-origin']));
+                $this->scoreType = 'success';
+            } elseif ($header == 'strict-origin') {
+                $this->score = 70;
+                $this->testDetails->push(TranslateableMessage::get('DIRECTIVE_SET', ['DIRECTIVE' => 'strict-origin']));
+            } elseif ($header == 'strict-origin-when-cross-origin') {
+                $this->score = 70;
+                $this->testDetails->push(TranslateableMessage::get('DIRECTIVE_SET', ['DIRECTIVE' => 'strict-origin-when-cross-origin']));
+            } elseif ($header == 'origin') {
+                $this->score = 40;
+                $this->testDetails->push(TranslateableMessage::get('DIRECTIVE_SET', ['DIRECTIVE' => 'origin']));
+            } elseif ($header == 'origin-when-cross-origin') {
+                $this->score = 40;
+                $this->testDetails->push(TranslateableMessage::get('DIRECTIVE_SET', ['DIRECTIVE' => 'origin-when-cross-origin']));
+            } elseif (empty($header)) {
+                $this->score = 10;
+                $this->testDetails->push(TranslateableMessage::get('EMPTY_DIRECTIVE'));
+            } elseif ($header == 'no-referrer-when-downgrade') {
+                $this->score = 0;
+                $this->testDetails->push(TranslateableMessage::get('DIRECTIVE_SET', ['DIRECTIVE' => 'no-referrer-when-downgrade']));
+            } elseif ($header == 'unsafe-url') {
+                $this->score = 0;
+                $this->testDetails->push(TranslateableMessage::get('DIRECTIVE_SET', ['DIRECTIVE' => 'unsafe-url']));
+            } else {
+                $this->score = 0;
+                $this->hasError = true;
+                $this->errorMessage = TranslateableMessage::get('WRONG_DIRECTIVE_SET');
+            }
+        }
+    }
+}
diff --git a/app/Ratings/SetCookieRating.php b/app/Ratings/SetCookieRating.php
new file mode 100644
index 0000000..e0fe8ce
--- /dev/null
+++ b/app/Ratings/SetCookieRating.php
@@ -0,0 +1,71 @@
+<?php
+
+namespace App\Ratings;
+
+use App\HTTPResponse;
+use App\TranslateableMessage;
+use Delight\Cookie\Cookie;
+
+class SetCookieRating extends Rating
+{
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'SET_COOKIE';
+        $this->scoreType = 'hidden';
+
+        parent::__construct($response);
+    }
+
+    protected function rate()
+    {
+        $header = $this->getHeader('set-cookie');
+
+        if ($header === null) {
+            // do nothing
+        } elseif ($header === 'ERROR') {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_ENCODING_ERROR', ['HEADER_NAME' => 'Set-Cookie']);
+        } else {
+            $this->scoreType = 'warning';
+
+            foreach ($header as $cookieHeader) {
+                $cookie = Cookie::parse('Set-Cookie: ' . $cookieHeader);
+                if ($cookie) {
+
+                    if ($cookie->isSecureOnly()) {
+                        $this->score += 90;
+                        $hasSecureFlag = true;
+                    } else {
+                        $hasSecureFlag = false;
+                    }
+
+                    if ($cookie->isHttpOnly()) {
+                        $this->score += 10;
+                        $hasHttpOnlyFlag = true;
+                    } else {
+                        $hasHttpOnlyFlag = false;
+                    }
+
+                    $this->testDetails->push(TranslateableMessage::get('COOKIE', [
+                        'NAME' => $cookie->getName(),
+                        'HTTPONLY' => $hasHttpOnlyFlag ? '🗸' : '✗',
+                        'SECURE' => $hasSecureFlag ? '🗸' : '✗',
+                    ]));
+                }
+                // Set-Cookie header exists but not valid so $cookie = null
+                else {
+                    $this->score -= 5;
+                    $this->testDetails->push(TranslateableMessage::get('INVALID_HEADER', ['HEADER' => 'Set-Cookie: ' . $cookieHeader]));
+                }
+            }
+
+            // Calculate average score for all cookie headers
+            $this->score = (int) ceil(($this->score / count($header)));
+            $this->score = $this->score > 100 ? 100 : $this->score;
+
+            if ($this->score == 100) {
+                $this->scoreType = 'success';
+            }
+        }
+    }
+}
diff --git a/app/Ratings/SinksRating.php b/app/Ratings/SinksRating.php
new file mode 100644
index 0000000..b5dfffc
--- /dev/null
+++ b/app/Ratings/SinksRating.php
@@ -0,0 +1,61 @@
+<?php
+
+namespace App\Ratings;
+
+use App\DOMXSSCheck;
+use App\HTTPResponse;
+use App\TranslateableMessage;
+
+class SinksRating extends Rating
+{
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'SINKS';
+        $this->scoreType = 'warning';
+
+        parent::__construct($response);
+    }
+
+    protected function rate()
+    {
+        /**
+         * var $html voku\helper\SimpleHtmlDom;.
+         */
+        $html = $this->getBody();
+
+        if ($html->getIsDOMDocumentCreatedWithoutHtml()) {
+            $this->hasError = true;
+            $this->score = 100;
+            $this->errorMessage = TranslateableMessage::get('NO_CONTENT');
+        } else {
+            $scriptTags = $html->find('script');
+
+            if (count($scriptTags) == 0) {
+                $this->score = 100;
+                $this->scoreType = 'success';
+                $this->testDetails->push(TranslateableMessage::get('NO_SCRIPT_TAGS'));
+            } else {
+                $this->score = 100;
+
+                // Search for Sinks and Sources
+                $sinkCounter = 0;
+                foreach ($scriptTags as $scriptTag) {
+                    if ($amountSinks = DOMXSSCheck::hasSinks($scriptTag->innertext, true)) {
+                        $sinkCounter += $amountSinks;
+                    }
+                }
+
+                if ($sinkCounter > 0) {
+                    $this->score = 0;
+                    $this->testDetails->push(TranslateableMessage::get('SINKS_FOUND', ['AMOUNT' => $sinkCounter]));
+                } else {
+                    $this->testDetails->push(TranslateableMessage::get('NO_SINKS_FOUND'));
+                }
+
+                if ($this->score == 100) {
+                    $this->scoreType = 'success';
+                }
+            }
+        }
+    }
+}
diff --git a/app/Ratings/SourcesRating.php b/app/Ratings/SourcesRating.php
new file mode 100644
index 0000000..f429dd4
--- /dev/null
+++ b/app/Ratings/SourcesRating.php
@@ -0,0 +1,61 @@
+<?php
+
+namespace App\Ratings;
+
+use App\DOMXSSCheck;
+use App\HTTPResponse;
+use App\TranslateableMessage;
+
+class SourcesRating extends Rating
+{
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'SOURCES';
+        $this->scoreType = 'warning';
+
+        parent::__construct($response);
+    }
+
+    protected function rate()
+    {
+        /**
+         * var $html voku\helper\SimpleHtmlDom;.
+         */
+        $html = $this->getBody();
+
+        if ($html->getIsDOMDocumentCreatedWithoutHtml()) {
+            $this->hasError = true;
+            $this->score = 100;
+            $this->errorMessage = TranslateableMessage::get('NO_CONTENT');
+        } else {
+            $scriptTags = $html->find('script');
+
+            if (count($scriptTags) == 0) {
+                $this->score = 100;
+                $this->scoreType = 'success';
+                $this->testDetails->push(TranslateableMessage::get('NO_SCRIPT_TAGS'));
+            } else {
+                $this->score = 100;
+
+                // Search for Sinks and Sources
+                $sourceCounter = 0;
+                foreach ($scriptTags as $scriptTag) {
+                    if ($amountSources = DOMXSSCheck::hasSources($scriptTag->innertext, true)) {
+                        $sourceCounter += $amountSources;
+                    }
+                }
+
+                if ($sourceCounter > 0) {
+                    $this->score = 0;
+                    $this->testDetails->push(TranslateableMessage::get('SOURCES_FOUND', ['AMOUNT' => $sourceCounter]));
+                } else {
+                    $this->testDetails->push(TranslateableMessage::get('NO_SOURCES_FOUND'));
+                }
+
+                if ($this->score == 100) {
+                    $this->scoreType = 'success';
+                }
+            }
+        }
+    }
+}
diff --git a/app/Ratings/XContentTypeOptionsRating.php b/app/Ratings/XContentTypeOptionsRating.php
index 8282140..18a2192 100644
--- a/app/Ratings/XContentTypeOptionsRating.php
+++ b/app/Ratings/XContentTypeOptionsRating.php
@@ -2,43 +2,42 @@
 
 namespace App\Ratings;
 
+use App\HTTPResponse;
+use App\TranslateableMessage;
+
 class XContentTypeOptionsRating extends Rating
 {
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'X_CONTENT_TYPE_OPTIONS';
+        $this->scoreType = 'warning';
+
+        parent::__construct($response);
+    }
+
     protected function rate()
     {
         $header = $this->getHeader('x-content-type-options');
 
         if ($header === null) {
-            $this->rating = 'C';
-            $this->comment  = __('The header is not set.');
-        } elseif (count($header) > 1) {
-            $this->rating = 'C';
-            $this->comment  = __('The header is set multiple times.');
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_NOT_SET');
+        } elseif ($header === 'ERROR') {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_ENCODING_ERROR', ['HEADER_NAME' => 'X-Content-Type-Options']);
+        } elseif (is_array($header) && count($header) > 1) {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_SET_MULTIPLE_TIMES');
         } else {
             $header = $header[0];
 
-            $this->rating = 'C';
-            $this->comment = __('The header is not set correctly.');
-
-            if (strpos($header, 'nosniff') !== false) {
-                $this->rating = 'A';
-                $this->comment = __('The header is set correctly.');
+            if ($header === 'nosniff') {
+                $this->score = 100;
+                $this->scoreType = 'success';
+                $this->testDetails->push(TranslateableMessage::get('XCTO_CORRECT'));
+            } else {
+                $this->testDetails->push(TranslateableMessage::get('XCTO_NOT_CORRECT'));
             }
         }
     }
-
-    public static function getDescription()
-    {
-        // OWASP
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#X-Content-Type-Options
-        // TODO: Translate
-        return 'Setting this header will prevent the browser from interpreting files as something else than declared by the content type in the HTTP headers.';
-    }
-
-    public static function getBestPractice()
-    {
-        // OWASP
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#xcto
-        return 'nosniff';
-    }
 }
diff --git a/app/Ratings/XFrameOptionsRating.php b/app/Ratings/XFrameOptionsRating.php
index 98360e7..dae592e 100644
--- a/app/Ratings/XFrameOptionsRating.php
+++ b/app/Ratings/XFrameOptionsRating.php
@@ -2,43 +2,43 @@
 
 namespace App\Ratings;
 
+use App\HTTPResponse;
+use App\TranslateableMessage;
+
 class XFrameOptionsRating extends Rating
 {
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'X_FRAME_OPTIONS';
+        $this->scoreType = 'warning';
+
+        parent::__construct($response);
+    }
+
     protected function rate()
     {
         $header = $this->getHeader('x-frame-options');
 
         if ($header === null) {
-            $this->rating   = 'C';
-            $this->comment  = __('The header is not set.');
-        } elseif (count($header) > 1) {
-            $this->rating   = 'C';
-            $this->comment  = __('The header is set multiple times.');
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_NOT_SET');
+        } elseif (is_array($header) && count($header) > 1) {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_SET_MULTIPLE_TIMES');
+        } elseif ($header === 'ERROR') {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_ENCODING_ERROR');
         } else {
             $header = $header[0];
 
-            $this->rating   = 'A';
-            $this->comment  = __('The header is set and does not contain any wildcard.');
-
             if (strpos($header, '*') !== false) {
-                $this->rating   = 'C';
-                $this->comment  = __('The header contains wildcards and is thereby useless.');
+                $this->score = 0;
+                $this->testDetails->push(TranslateableMessage::get('XFO_WILDCARDS'));
+            } else {
+                $this->score = 100;
+                $this->scoreType = 'success';
+                $this->testDetails->push(TranslateableMessage::get('XFO_CORRECT'));
             }
         }
     }
-
-    public static function getDescription()
-    {
-        // OWASP Secure Headers Project
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#X-Frame-Options
-        // TODO: Translate
-        return 'X-Frame-Options response header improve the protection of web applications against Clickjacking. It declares a policy communicated from a host to the client browser on whether the browser must not display the transmitted content in frames of other web pages.';
-    }
-
-    public static function getBestPractice()
-    {
-        // Hackmanit
-        // TODO: Check and Translate
-        return 'Best Practice is to set this header accordingly to your needs. Do not use "allow-from: *".';
-    }
 }
diff --git a/app/Ratings/XXSSProtectionRating.php b/app/Ratings/XXSSProtectionRating.php
index 8e57822..47e0d56 100644
--- a/app/Ratings/XXSSProtectionRating.php
+++ b/app/Ratings/XXSSProtectionRating.php
@@ -2,43 +2,44 @@
 
 namespace App\Ratings;
 
+use App\HTTPResponse;
+use App\TranslateableMessage;
+
 class XXSSProtectionRating extends Rating
 {
+    public function __construct(HTTPResponse $response)
+    {
+        $this->name = 'X_XSS_PROTECTION';
+        $this->scoreType = 'warning';
+
+        parent::__construct($response);
+    }
+
     protected function rate()
     {
         $header = $this->getHeader('x-xss-protection');
 
         if ($header === null) {
-            $this->rating = 'C';
-            $this->comment  = __('The header is not set.');
-        } elseif (count($header) > 1) {
-            $this->rating = 'C';
-            $this->comment  = __('The header is set multiple times.');
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_NOT_SET');
+        } elseif ($header === 'ERROR') {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_ENCODING_ERROR', ['HEADER_NAME' => 'X-XSS-Protection']);
+        } elseif (is_array($header) && count($header) > 1) {
+            $this->hasError = true;
+            $this->errorMessage = TranslateableMessage::get('HEADER_SET_MULTIPLE_TIMES');
         } else {
             $header = $header[0];
 
-            $this->rating = 'B';
-            $this->comment = __('The header is set correctly.');
+            $this->score = 50;
 
             if (strpos($header, 'mode=block') !== false) {
-                $this->rating = 'A';
-                $this->comment .= "\n" . __('"mode=block" is activated.');
+                $this->score = 100;
+                $this->scoreType = 'success';
+                $this->testDetails->push(TranslateableMessage::get('XXSS_BLOCK'));
+            } else {
+                $this->testDetails->push(TranslateableMessage::get('XXSS_CORRECT'));
             }
         }
     }
-
-    public static function getDescription()
-    {
-        // OWASP
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#X-XSS-Protection
-        // TODO: Translate
-        return 'This header enables the Cross-site scripting (XSS) filter in your browser.';
-    }
-
-    public static function getBestPractice()
-    {
-        // OWASP
-        // https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#xxp
-        return '1; mode=block';
-    }
 }
diff --git a/app/TranslateableMessage.php b/app/TranslateableMessage.php
new file mode 100644
index 0000000..7345b26
--- /dev/null
+++ b/app/TranslateableMessage.php
@@ -0,0 +1,20 @@
+<?php
+
+namespace App;
+
+class TranslateableMessage
+{
+    /**
+     * Set id and placeholders for a TranslateableMessage.
+     *
+     * @param string     $translationStringId
+     * @param null|array $placeholders
+     */
+    public static function get(String $translationStringId, $placeholders = null)
+    {
+        return [
+            'translationStringId' => $translationStringId,
+            'placeholders'      => $placeholders,
+        ];
+    }
+}
diff --git a/composer.json b/composer.json
index 4fa2dea..f769d80 100644
--- a/composer.json
+++ b/composer.json
@@ -5,19 +5,22 @@
     "license": "MIT",
     "type": "project",
     "require": {
-        "php": ">=5.6.4",
-        "guzzlehttp/guzzle": "^6.2",
-        "kevinrob/guzzle-cache-middleware": "^1.5",
-        "laravel/framework": "5.4.*",
-        "voku/simple_html_dom": "^1.5"
+        "php": ">=7.1.0",
+        "delight-im/cookie": "^3.1",
+        "fideloper/proxy": "^4.0",
+        "guzzlehttp/guzzle": "^6.3",
+        "laravel/framework": "5.7.*",
+        "predis/predis": "^1.1",
+        "voku/simple_html_dom": "^4.1"
     },
     "require-dev": {
+        "filp/whoops": "~2.0",
         "fzaninotto/faker": "~1.4",
         "mockery/mockery": "0.9.*",
-        "phpunit/phpunit": "~5.0",
+        "phpunit/phpunit": "~7.0",
         "symfony/css-selector": "3.1.*",
         "symfony/dom-crawler": "3.1.*",
-        "barryvdh/laravel-ide-helper": "^2.2"
+        "timacdonald/log-fake": "^1.0"
     },
     "autoload": {
         "classmap": [
@@ -39,13 +42,9 @@
         "post-create-project-cmd": [
             "php artisan key:generate"
         ],
-        "post-install-cmd": [
-            "Illuminate\\Foundation\\ComposerScripts::postInstall",
-            "php artisan optimize"
-        ],
-        "post-update-cmd": [
-            "Illuminate\\Foundation\\ComposerScripts::postUpdate",
-            "php artisan optimize"
+        "post-autoload-dump": [
+            "Illuminate\\Foundation\\ComposerScripts::postAutoloadDump",
+            "@php artisan package:discover"
         ]
     },
     "config": {
diff --git a/composer.lock b/composer.lock
index f623d0e..38042f1 100644
--- a/composer.lock
+++ b/composer.lock
@@ -1,27 +1,104 @@
 {
     "_readme": [
         "This file locks the dependencies of your project to a known state",
-        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#composer-lock-the-lock-file",
+        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "c5138065001939488de4ffa4d6b86655",
+    "content-hash": "47c4c199a604a2bf99ec22036fd47c38",
     "packages": [
+        {
+            "name": "delight-im/cookie",
+            "version": "v3.1.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/delight-im/PHP-Cookie.git",
+                "reference": "b3ca3233dd1e1e91efb259b9b717a1c941d67ecc"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/delight-im/PHP-Cookie/zipball/b3ca3233dd1e1e91efb259b9b717a1c941d67ecc",
+                "reference": "b3ca3233dd1e1e91efb259b9b717a1c941d67ecc",
+                "shasum": ""
+            },
+            "require": {
+                "delight-im/http": "^2.0",
+                "php": ">=5.4.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Delight\\Cookie\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "Modern cookie management for PHP",
+            "homepage": "https://github.com/delight-im/PHP-Cookie",
+            "keywords": [
+                "cookie",
+                "cookies",
+                "csrf",
+                "http",
+                "same-site",
+                "samesite",
+                "xss"
+            ],
+            "time": "2018-10-11T17:27:45+00:00"
+        },
+        {
+            "name": "delight-im/http",
+            "version": "v2.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/delight-im/PHP-HTTP.git",
+                "reference": "0a19a72a7eac8b1301aa972fb20cff494ac43e09"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/delight-im/PHP-HTTP/zipball/0a19a72a7eac8b1301aa972fb20cff494ac43e09",
+                "reference": "0a19a72a7eac8b1301aa972fb20cff494ac43e09",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Delight\\Http\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "Hypertext Transfer Protocol (HTTP) utilities for PHP",
+            "homepage": "https://github.com/delight-im/PHP-HTTP",
+            "keywords": [
+                "headers",
+                "http",
+                "https"
+            ],
+            "time": "2016-07-21T15:05:01+00:00"
+        },
         {
             "name": "doctrine/inflector",
-            "version": "v1.2.0",
+            "version": "1.3.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/doctrine/inflector.git",
-                "reference": "e11d84c6e018beedd929cff5220969a3c6d1d462"
+                "reference": "ec3a55242203ffa6a4b27c58176da97ff0a7aec1"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/doctrine/inflector/zipball/e11d84c6e018beedd929cff5220969a3c6d1d462",
-                "reference": "e11d84c6e018beedd929cff5220969a3c6d1d462",
+                "url": "https://api.github.com/repos/doctrine/inflector/zipball/ec3a55242203ffa6a4b27c58176da97ff0a7aec1",
+                "reference": "ec3a55242203ffa6a4b27c58176da97ff0a7aec1",
                 "shasum": ""
             },
             "require": {
-                "php": "^7.0"
+                "php": "^7.1"
             },
             "require-dev": {
                 "phpunit/phpunit": "^6.2"
@@ -29,7 +106,7 @@
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.2.x-dev"
+                    "dev-master": "1.3.x-dev"
                 }
             },
             "autoload": {
@@ -42,6 +119,10 @@
                 "MIT"
             ],
             "authors": [
+                {
+                    "name": "Guilherme Blanco",
+                    "email": "guilhermeblanco@gmail.com"
+                },
                 {
                     "name": "Roman Borschel",
                     "email": "roman@code-factory.org"
@@ -50,10 +131,6 @@
                     "name": "Benjamin Eberlei",
                     "email": "kontakt@beberlei.de"
                 },
-                {
-                    "name": "Guilherme Blanco",
-                    "email": "guilhermeblanco@gmail.com"
-                },
                 {
                     "name": "Jonathan Wage",
                     "email": "jonwage@gmail.com"
@@ -71,25 +148,203 @@
                 "singularize",
                 "string"
             ],
-            "time": "2017-07-22T12:18:28+00:00"
+            "time": "2019-10-30T19:59:35+00:00"
+        },
+        {
+            "name": "doctrine/lexer",
+            "version": "1.2.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/lexer.git",
+                "reference": "5242d66dbeb21a30dd8a3e66bf7a73b66e05e1f6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/lexer/zipball/5242d66dbeb21a30dd8a3e66bf7a73b66e05e1f6",
+                "reference": "5242d66dbeb21a30dd8a3e66bf7a73b66e05e1f6",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^6.0",
+                "phpstan/phpstan": "^0.11.8",
+                "phpunit/phpunit": "^8.2"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.2.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Common\\Lexer\\": "lib/Doctrine/Common/Lexer"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Guilherme Blanco",
+                    "email": "guilhermeblanco@gmail.com"
+                },
+                {
+                    "name": "Roman Borschel",
+                    "email": "roman@code-factory.org"
+                },
+                {
+                    "name": "Johannes Schmitt",
+                    "email": "schmittjoh@gmail.com"
+                }
+            ],
+            "description": "PHP Doctrine Lexer parser library that can be used in Top-Down, Recursive Descent Parsers.",
+            "homepage": "https://www.doctrine-project.org/projects/lexer.html",
+            "keywords": [
+                "annotations",
+                "docblock",
+                "lexer",
+                "parser",
+                "php"
+            ],
+            "time": "2019-10-30T14:39:59+00:00"
+        },
+        {
+            "name": "dragonmantank/cron-expression",
+            "version": "v2.3.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/dragonmantank/cron-expression.git",
+                "reference": "72b6fbf76adb3cf5bc0db68559b33d41219aba27"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/dragonmantank/cron-expression/zipball/72b6fbf76adb3cf5bc0db68559b33d41219aba27",
+                "reference": "72b6fbf76adb3cf5bc0db68559b33d41219aba27",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^6.4|^7.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.3-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Cron\\": "src/Cron/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Michael Dowling",
+                    "email": "mtdowling@gmail.com",
+                    "homepage": "https://github.com/mtdowling"
+                },
+                {
+                    "name": "Chris Tankersley",
+                    "email": "chris@ctankersley.com",
+                    "homepage": "https://github.com/dragonmantank"
+                }
+            ],
+            "description": "CRON for PHP: Calculate the next or previous run date and determine if a CRON expression is due",
+            "keywords": [
+                "cron",
+                "schedule"
+            ],
+            "time": "2019-03-31T00:38:28+00:00"
+        },
+        {
+            "name": "egulias/email-validator",
+            "version": "2.1.11",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/egulias/EmailValidator.git",
+                "reference": "92dd169c32f6f55ba570c309d83f5209cefb5e23"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/egulias/EmailValidator/zipball/92dd169c32f6f55ba570c309d83f5209cefb5e23",
+                "reference": "92dd169c32f6f55ba570c309d83f5209cefb5e23",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/lexer": "^1.0.1",
+                "php": ">= 5.5"
+            },
+            "require-dev": {
+                "dominicsayers/isemail": "dev-master",
+                "phpunit/phpunit": "^4.8.35||^5.7||^6.0",
+                "satooshi/php-coveralls": "^1.0.1",
+                "symfony/phpunit-bridge": "^4.4@dev"
+            },
+            "suggest": {
+                "ext-intl": "PHP Internationalization Libraries are required to use the SpoofChecking validation"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.1.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Egulias\\EmailValidator\\": "EmailValidator"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Eduardo Gulias Davis"
+                }
+            ],
+            "description": "A library for validating emails against several RFCs",
+            "homepage": "https://github.com/egulias/EmailValidator",
+            "keywords": [
+                "email",
+                "emailvalidation",
+                "emailvalidator",
+                "validation",
+                "validator"
+            ],
+            "time": "2019-08-13T17:33:27+00:00"
         },
         {
             "name": "erusev/parsedown",
-            "version": "1.6.3",
+            "version": "1.7.3",
             "source": {
                 "type": "git",
                 "url": "https://github.com/erusev/parsedown.git",
-                "reference": "728952b90a333b5c6f77f06ea9422b94b585878d"
+                "reference": "6d893938171a817f4e9bc9e86f2da1e370b7bcd7"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/erusev/parsedown/zipball/728952b90a333b5c6f77f06ea9422b94b585878d",
-                "reference": "728952b90a333b5c6f77f06ea9422b94b585878d",
+                "url": "https://api.github.com/repos/erusev/parsedown/zipball/6d893938171a817f4e9bc9e86f2da1e370b7bcd7",
+                "reference": "6d893938171a817f4e9bc9e86f2da1e370b7bcd7",
                 "shasum": ""
             },
             "require": {
+                "ext-mbstring": "*",
                 "php": ">=5.3.0"
             },
+            "require-dev": {
+                "phpunit/phpunit": "^4.8.35"
+            },
             "type": "library",
             "autoload": {
                 "psr-0": {
@@ -113,31 +368,86 @@
                 "markdown",
                 "parser"
             ],
-            "time": "2017-05-14T14:47:48+00:00"
+            "time": "2019-03-17T18:48:37+00:00"
+        },
+        {
+            "name": "fideloper/proxy",
+            "version": "4.2.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/fideloper/TrustedProxy.git",
+                "reference": "03085e58ec7bee24773fa5a8850751a6e61a7e8a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/fideloper/TrustedProxy/zipball/03085e58ec7bee24773fa5a8850751a6e61a7e8a",
+                "reference": "03085e58ec7bee24773fa5a8850751a6e61a7e8a",
+                "shasum": ""
+            },
+            "require": {
+                "illuminate/contracts": "^5.0|^6.0|^7.0",
+                "php": ">=5.4.0"
+            },
+            "require-dev": {
+                "illuminate/http": "^5.0|^6.0|^7.0",
+                "mockery/mockery": "^1.0",
+                "phpunit/phpunit": "^6.0"
+            },
+            "type": "library",
+            "extra": {
+                "laravel": {
+                    "providers": [
+                        "Fideloper\\Proxy\\TrustedProxyServiceProvider"
+                    ]
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Fideloper\\Proxy\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Chris Fidao",
+                    "email": "fideloper@gmail.com"
+                }
+            ],
+            "description": "Set trusted proxies for Laravel",
+            "keywords": [
+                "load balancing",
+                "proxy",
+                "trusted proxy"
+            ],
+            "time": "2019-09-03T16:45:42+00:00"
         },
         {
             "name": "guzzlehttp/guzzle",
-            "version": "6.3.0",
+            "version": "6.4.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/guzzle/guzzle.git",
-                "reference": "f4db5a78a5ea468d4831de7f0bf9d9415e348699"
+                "reference": "0895c932405407fd3a7368b6910c09a24d26db11"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/guzzle/guzzle/zipball/f4db5a78a5ea468d4831de7f0bf9d9415e348699",
-                "reference": "f4db5a78a5ea468d4831de7f0bf9d9415e348699",
+                "url": "https://api.github.com/repos/guzzle/guzzle/zipball/0895c932405407fd3a7368b6910c09a24d26db11",
+                "reference": "0895c932405407fd3a7368b6910c09a24d26db11",
                 "shasum": ""
             },
             "require": {
+                "ext-json": "*",
                 "guzzlehttp/promises": "^1.0",
-                "guzzlehttp/psr7": "^1.4",
+                "guzzlehttp/psr7": "^1.6.1",
                 "php": ">=5.5"
             },
             "require-dev": {
                 "ext-curl": "*",
-                "phpunit/phpunit": "^4.0 || ^5.0",
-                "psr/log": "^1.0"
+                "phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.4 || ^7.0",
+                "psr/log": "^1.1"
             },
             "suggest": {
                 "psr/log": "Required for using the Log middleware"
@@ -145,16 +455,16 @@
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "6.2-dev"
+                    "dev-master": "6.3-dev"
                 }
             },
             "autoload": {
-                "files": [
-                    "src/functions_include.php"
-                ],
                 "psr-4": {
                     "GuzzleHttp\\": "src/"
-                }
+                },
+                "files": [
+                    "src/functions_include.php"
+                ]
             },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
@@ -178,7 +488,7 @@
                 "rest",
                 "web service"
             ],
-            "time": "2017-06-22T18:50:49+00:00"
+            "time": "2019-10-23T15:58:00+00:00"
         },
         {
             "name": "guzzlehttp/promises",
@@ -233,32 +543,37 @@
         },
         {
             "name": "guzzlehttp/psr7",
-            "version": "1.4.2",
+            "version": "1.6.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/guzzle/psr7.git",
-                "reference": "f5b8a8512e2b58b0071a7280e39f14f72e05d87c"
+                "reference": "239400de7a173fe9901b9ac7c06497751f00727a"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/guzzle/psr7/zipball/f5b8a8512e2b58b0071a7280e39f14f72e05d87c",
-                "reference": "f5b8a8512e2b58b0071a7280e39f14f72e05d87c",
+                "url": "https://api.github.com/repos/guzzle/psr7/zipball/239400de7a173fe9901b9ac7c06497751f00727a",
+                "reference": "239400de7a173fe9901b9ac7c06497751f00727a",
                 "shasum": ""
             },
             "require": {
                 "php": ">=5.4.0",
-                "psr/http-message": "~1.0"
+                "psr/http-message": "~1.0",
+                "ralouphie/getallheaders": "^2.0.5 || ^3.0.0"
             },
             "provide": {
                 "psr/http-message-implementation": "1.0"
             },
             "require-dev": {
-                "phpunit/phpunit": "~4.0"
+                "ext-zlib": "*",
+                "phpunit/phpunit": "~4.8.36 || ^5.7.27 || ^6.5.8"
+            },
+            "suggest": {
+                "zendframework/zend-httphandlerrunner": "Emit PSR-7 responses"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.4-dev"
+                    "dev-master": "1.6-dev"
                 }
             },
             "autoload": {
@@ -288,36 +603,46 @@
             "keywords": [
                 "http",
                 "message",
+                "psr-7",
                 "request",
                 "response",
                 "stream",
                 "uri",
                 "url"
             ],
-            "time": "2017-03-20T17:10:46+00:00"
+            "time": "2019-07-01T23:21:34+00:00"
         },
         {
-            "name": "ircmaxell/password-compat",
-            "version": "v1.0.4",
+            "name": "kylekatarnls/update-helper",
+            "version": "1.2.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/ircmaxell/password_compat.git",
-                "reference": "5c5cde8822a69545767f7c7f3058cb15ff84614c"
+                "url": "https://github.com/kylekatarnls/update-helper.git",
+                "reference": "5786fa188e0361b9adf9e8199d7280d1b2db165e"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/ircmaxell/password_compat/zipball/5c5cde8822a69545767f7c7f3058cb15ff84614c",
-                "reference": "5c5cde8822a69545767f7c7f3058cb15ff84614c",
+                "url": "https://api.github.com/repos/kylekatarnls/update-helper/zipball/5786fa188e0361b9adf9e8199d7280d1b2db165e",
+                "reference": "5786fa188e0361b9adf9e8199d7280d1b2db165e",
                 "shasum": ""
             },
+            "require": {
+                "composer-plugin-api": "^1.1.0 || ^2.0.0",
+                "php": ">=5.3.0"
+            },
             "require-dev": {
-                "phpunit/phpunit": "4.*"
+                "codeclimate/php-test-reporter": "dev-master",
+                "composer/composer": "2.0.x-dev || ^2.0.0-dev",
+                "phpunit/phpunit": ">=4.8.35 <6.0"
+            },
+            "type": "composer-plugin",
+            "extra": {
+                "class": "UpdateHelper\\ComposerPlugin"
             },
-            "type": "library",
             "autoload": {
-                "files": [
-                    "lib/password.php"
-                ]
+                "psr-0": {
+                    "UpdateHelper\\": "src/"
+                }
             },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
@@ -325,134 +650,57 @@
             ],
             "authors": [
                 {
-                    "name": "Anthony Ferrara",
-                    "email": "ircmaxell@php.net",
-                    "homepage": "http://blog.ircmaxell.com"
+                    "name": "Kyle",
+                    "email": "kylekatarnls@gmail.com"
                 }
             ],
-            "description": "A compatibility library for the proposed simplified password hashing algorithm: https://wiki.php.net/rfc/password_hash",
-            "homepage": "https://github.com/ircmaxell/password_compat",
-            "keywords": [
-                "hashing",
-                "password"
-            ],
-            "time": "2014-11-20T16:49:30+00:00"
+            "description": "Update helper",
+            "time": "2019-07-29T11:03:54+00:00"
         },
         {
-            "name": "kevinrob/guzzle-cache-middleware",
-            "version": "v1.5.2",
+            "name": "laravel/framework",
+            "version": "v5.7.28",
             "source": {
                 "type": "git",
-                "url": "https://github.com/Kevinrob/guzzle-cache-middleware.git",
-                "reference": "2893fff87ef9f7f2c669957f5e446beea48d7a1d"
+                "url": "https://github.com/laravel/framework.git",
+                "reference": "8e69728f1c80a024588adbd24c65c4fcf9aa9192"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/Kevinrob/guzzle-cache-middleware/zipball/2893fff87ef9f7f2c669957f5e446beea48d7a1d",
-                "reference": "2893fff87ef9f7f2c669957f5e446beea48d7a1d",
+                "url": "https://api.github.com/repos/laravel/framework/zipball/8e69728f1c80a024588adbd24c65c4fcf9aa9192",
+                "reference": "8e69728f1c80a024588adbd24c65c4fcf9aa9192",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.0"
+                "doctrine/inflector": "^1.1",
+                "dragonmantank/cron-expression": "^2.0",
+                "erusev/parsedown": "^1.7",
+                "ext-mbstring": "*",
+                "ext-openssl": "*",
+                "laravel/nexmo-notification-channel": "^1.0",
+                "laravel/slack-notification-channel": "^1.0",
+                "league/flysystem": "^1.0.8",
+                "monolog/monolog": "^1.12",
+                "nesbot/carbon": "^1.26.3",
+                "opis/closure": "^3.1",
+                "php": "^7.1.3",
+                "psr/container": "^1.0",
+                "psr/simple-cache": "^1.0",
+                "ramsey/uuid": "^3.7",
+                "swiftmailer/swiftmailer": "^6.0",
+                "symfony/console": "^4.1",
+                "symfony/debug": "^4.1",
+                "symfony/finder": "^4.1",
+                "symfony/http-foundation": "^4.1",
+                "symfony/http-kernel": "^4.1",
+                "symfony/process": "^4.1",
+                "symfony/routing": "^4.1",
+                "symfony/var-dumper": "^4.1",
+                "tijsverkoyen/css-to-inline-styles": "^2.2.1",
+                "vlucas/phpdotenv": "^2.2"
             },
-            "require-dev": {
-                "cache/array-adapter": "^0.4",
-                "doctrine/cache": "^1.0",
-                "guzzlehttp/guzzle": "^6.0",
-                "illuminate/cache": "^5.0",
-                "league/flysystem": "^1.0",
-                "phpunit/phpunit": "^4.0 || ^5.0",
-                "psr/cache": "^1.0"
-            },
-            "suggest": {
-                "doctrine/cache": "This library have a lot of ready-to-use cache storage (to be use with Kevinrob\\GuzzleCache\\Storage\\DoctrineCacheStorage)",
-                "guzzlehttp/guzzle": "For using this library. It was created for Guzzle6. (but you can use it with any PSR-7 HTTP Client)",
-                "laravel/framework": "To be use with Kevinrob\\GuzzleCache\\Storage\\LaravelCacheStorage",
-                "league/flysystem": "To be use with Kevinrob\\GuzzleCache\\Storage\\FlysystemStorage",
-                "psr/cache": "To be use with Kevinrob\\GuzzleCache\\Storage\\Psr6CacheStorage"
-            },
-            "type": "library",
-            "autoload": {
-                "psr-4": {
-                    "Kevinrob\\GuzzleCache\\": [
-                        "src/",
-                        "tests/"
-                    ]
-                }
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "MIT"
-            ],
-            "authors": [
-                {
-                    "name": "Kevin Robatel",
-                    "email": "kevinrob2@gmail.com",
-                    "homepage": "https://github.com/Kevinrob"
-                }
-            ],
-            "description": "A HTTP/1.1 Cache for Guzzle 6. It's a simple Middleware to be added in the HandlerStack. (RFC 7234)",
-            "homepage": "https://github.com/Kevinrob/guzzle-cache-middleware",
-            "keywords": [
-                "Etag",
-                "Flysystem",
-                "Guzzle",
-                "cache",
-                "cache-control",
-                "doctrine",
-                "expiration",
-                "guzzle6",
-                "handler",
-                "http",
-                "http 1.1",
-                "middleware",
-                "performance",
-                "php",
-                "promise",
-                "psr6",
-                "psr7",
-                "rfc7234",
-                "validation"
-            ],
-            "time": "2017-01-16T07:02:13+00:00"
-        },
-        {
-            "name": "laravel/framework",
-            "version": "v5.4.30",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/laravel/framework.git",
-                "reference": "b9a64955f4278f45ac348a6e000b5ecc85da167a"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/laravel/framework/zipball/b9a64955f4278f45ac348a6e000b5ecc85da167a",
-                "reference": "b9a64955f4278f45ac348a6e000b5ecc85da167a",
-                "shasum": ""
-            },
-            "require": {
-                "doctrine/inflector": "~1.0",
-                "erusev/parsedown": "~1.6",
-                "ext-mbstring": "*",
-                "ext-openssl": "*",
-                "league/flysystem": "~1.0",
-                "monolog/monolog": "~1.11",
-                "mtdowling/cron-expression": "~1.0",
-                "nesbot/carbon": "~1.20",
-                "paragonie/random_compat": "~1.4|~2.0",
-                "php": ">=5.6.4",
-                "ramsey/uuid": "~3.0",
-                "swiftmailer/swiftmailer": "~5.4",
-                "symfony/console": "~3.2",
-                "symfony/debug": "~3.2",
-                "symfony/finder": "~3.2",
-                "symfony/http-foundation": "~3.2",
-                "symfony/http-kernel": "~3.2",
-                "symfony/process": "~3.2",
-                "symfony/routing": "~3.2",
-                "symfony/var-dumper": "~3.2",
-                "tijsverkoyen/css-to-inline-styles": "~2.2",
-                "vlucas/phpdotenv": "~2.2"
+            "conflict": {
+                "tightenco/collect": "<5.5.33"
             },
             "replace": {
                 "illuminate/auth": "self.version",
@@ -467,7 +715,6 @@
                 "illuminate/database": "self.version",
                 "illuminate/encryption": "self.version",
                 "illuminate/events": "self.version",
-                "illuminate/exception": "self.version",
                 "illuminate/filesystem": "self.version",
                 "illuminate/hashing": "self.version",
                 "illuminate/http": "self.version",
@@ -483,39 +730,50 @@
                 "illuminate/support": "self.version",
                 "illuminate/translation": "self.version",
                 "illuminate/validation": "self.version",
-                "illuminate/view": "self.version",
-                "tightenco/collect": "self.version"
+                "illuminate/view": "self.version"
             },
             "require-dev": {
-                "aws/aws-sdk-php": "~3.0",
-                "doctrine/dbal": "~2.5",
-                "mockery/mockery": "~0.9.4",
-                "pda/pheanstalk": "~3.0",
-                "phpunit/phpunit": "~5.7",
-                "predis/predis": "~1.0",
-                "symfony/css-selector": "~3.2",
-                "symfony/dom-crawler": "~3.2"
+                "aws/aws-sdk-php": "^3.0",
+                "doctrine/dbal": "^2.6",
+                "filp/whoops": "^2.1.4",
+                "guzzlehttp/guzzle": "^6.3",
+                "league/flysystem-cached-adapter": "^1.0",
+                "mockery/mockery": "^1.0",
+                "moontoast/math": "^1.1",
+                "orchestra/testbench-core": "3.7.*",
+                "pda/pheanstalk": "^3.0|^4.0",
+                "phpunit/phpunit": "^7.5",
+                "predis/predis": "^1.1.1",
+                "symfony/css-selector": "^4.1",
+                "symfony/dom-crawler": "^4.1",
+                "true/punycode": "^2.1"
             },
             "suggest": {
-                "aws/aws-sdk-php": "Required to use the SQS queue driver and SES mail driver (~3.0).",
-                "doctrine/dbal": "Required to rename columns and drop SQLite columns (~2.5).",
-                "fzaninotto/faker": "Required to use the eloquent factory builder (~1.4).",
-                "guzzlehttp/guzzle": "Required to use the Mailgun and Mandrill mail drivers and the ping methods on schedules (~6.0).",
-                "laravel/tinker": "Required to use the tinker console command (~1.0).",
-                "league/flysystem-aws-s3-v3": "Required to use the Flysystem S3 driver (~1.0).",
-                "league/flysystem-rackspace": "Required to use the Flysystem Rackspace driver (~1.0).",
-                "nexmo/client": "Required to use the Nexmo transport (~1.0).",
-                "pda/pheanstalk": "Required to use the beanstalk queue driver (~3.0).",
-                "predis/predis": "Required to use the redis cache and queue drivers (~1.0).",
-                "pusher/pusher-php-server": "Required to use the Pusher broadcast driver (~2.0).",
-                "symfony/css-selector": "Required to use some of the crawler integration testing tools (~3.2).",
-                "symfony/dom-crawler": "Required to use most of the crawler integration testing tools (~3.2).",
-                "symfony/psr-http-message-bridge": "Required to psr7 bridging features (0.2.*)."
+                "aws/aws-sdk-php": "Required to use the SQS queue driver and SES mail driver (^3.0).",
+                "doctrine/dbal": "Required to rename columns and drop SQLite columns (^2.6).",
+                "ext-pcntl": "Required to use all features of the queue worker.",
+                "ext-posix": "Required to use all features of the queue worker.",
+                "filp/whoops": "Required for friendly error pages in development (^2.1.4).",
+                "fzaninotto/faker": "Required to use the eloquent factory builder (^1.4).",
+                "guzzlehttp/guzzle": "Required to use the Mailgun and Mandrill mail drivers and the ping methods on schedules (^6.0).",
+                "laravel/tinker": "Required to use the tinker console command (^1.0).",
+                "league/flysystem-aws-s3-v3": "Required to use the Flysystem S3 driver (^1.0).",
+                "league/flysystem-cached-adapter": "Required to use the Flysystem cache (^1.0).",
+                "league/flysystem-rackspace": "Required to use the Flysystem Rackspace driver (^1.0).",
+                "league/flysystem-sftp": "Required to use the Flysystem SFTP driver (^1.0).",
+                "moontoast/math": "Required to use ordered UUIDs (^1.1).",
+                "nexmo/client": "Required to use the Nexmo transport (^1.0).",
+                "pda/pheanstalk": "Required to use the beanstalk queue driver (^3.0|^4.0).",
+                "predis/predis": "Required to use the redis cache and queue drivers (^1.0).",
+                "pusher/pusher-php-server": "Required to use the Pusher broadcast driver (^3.0).",
+                "symfony/css-selector": "Required to use some of the crawler integration testing tools (^4.1).",
+                "symfony/dom-crawler": "Required to use most of the crawler integration testing tools (^4.1).",
+                "symfony/psr-http-message-bridge": "Required to psr7 bridging features (^1.0)."
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "5.4-dev"
+                    "dev-master": "5.7-dev"
                 }
             },
             "autoload": {
@@ -543,47 +801,217 @@
                 "framework",
                 "laravel"
             ],
-            "time": "2017-07-19T19:26:19+00:00"
+            "time": "2019-02-26T15:41:34+00:00"
+        },
+        {
+            "name": "laravel/nexmo-notification-channel",
+            "version": "v1.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/laravel/nexmo-notification-channel.git",
+                "reference": "03edd42a55b306ff980c9950899d5a2b03260d48"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/laravel/nexmo-notification-channel/zipball/03edd42a55b306ff980c9950899d5a2b03260d48",
+                "reference": "03edd42a55b306ff980c9950899d5a2b03260d48",
+                "shasum": ""
+            },
+            "require": {
+                "nexmo/client": "^1.0",
+                "php": "^7.1.3"
+            },
+            "require-dev": {
+                "illuminate/notifications": "~5.7",
+                "mockery/mockery": "^1.0",
+                "phpunit/phpunit": "^7.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev"
+                },
+                "laravel": {
+                    "providers": [
+                        "Illuminate\\Notifications\\NexmoChannelServiceProvider"
+                    ]
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Illuminate\\Notifications\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Taylor Otwell",
+                    "email": "taylor@laravel.com"
+                }
+            ],
+            "description": "Nexmo Notification Channel for laravel.",
+            "keywords": [
+                "laravel",
+                "nexmo",
+                "notifications"
+            ],
+            "time": "2018-12-04T12:57:08+00:00"
+        },
+        {
+            "name": "laravel/slack-notification-channel",
+            "version": "v1.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/laravel/slack-notification-channel.git",
+                "reference": "6e164293b754a95f246faf50ab2bbea3e4923cc9"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/laravel/slack-notification-channel/zipball/6e164293b754a95f246faf50ab2bbea3e4923cc9",
+                "reference": "6e164293b754a95f246faf50ab2bbea3e4923cc9",
+                "shasum": ""
+            },
+            "require": {
+                "guzzlehttp/guzzle": "^6.0",
+                "php": "^7.1.3"
+            },
+            "require-dev": {
+                "illuminate/notifications": "~5.7",
+                "mockery/mockery": "^1.0",
+                "phpunit/phpunit": "^7.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev"
+                },
+                "laravel": {
+                    "providers": [
+                        "Illuminate\\Notifications\\SlackChannelServiceProvider"
+                    ]
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Illuminate\\Notifications\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Taylor Otwell",
+                    "email": "taylor@laravel.com"
+                }
+            ],
+            "description": "Slack Notification Channel for laravel.",
+            "keywords": [
+                "laravel",
+                "notifications",
+                "slack"
+            ],
+            "time": "2018-12-12T13:12:06+00:00"
+        },
+        {
+            "name": "lcobucci/jwt",
+            "version": "3.3.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/lcobucci/jwt.git",
+                "reference": "a11ec5f4b4d75d1fcd04e133dede4c317aac9e18"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/lcobucci/jwt/zipball/a11ec5f4b4d75d1fcd04e133dede4c317aac9e18",
+                "reference": "a11ec5f4b4d75d1fcd04e133dede4c317aac9e18",
+                "shasum": ""
+            },
+            "require": {
+                "ext-mbstring": "*",
+                "ext-openssl": "*",
+                "php": "^5.6 || ^7.0"
+            },
+            "require-dev": {
+                "mikey179/vfsstream": "~1.5",
+                "phpmd/phpmd": "~2.2",
+                "phpunit/php-invoker": "~1.1",
+                "phpunit/phpunit": "^5.7 || ^7.3",
+                "squizlabs/php_codesniffer": "~2.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.1-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Lcobucci\\JWT\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Luís Otávio Cobucci Oblonczyk",
+                    "role": "Developer",
+                    "email": "lcobucci@gmail.com"
+                }
+            ],
+            "description": "A simple library to work with JSON Web Token and JSON Web Signature",
+            "keywords": [
+                "JWS",
+                "jwt"
+            ],
+            "time": "2019-05-24T18:30:49+00:00"
         },
         {
             "name": "league/flysystem",
-            "version": "1.0.40",
+            "version": "1.0.57",
             "source": {
                 "type": "git",
                 "url": "https://github.com/thephpleague/flysystem.git",
-                "reference": "3828f0b24e2c1918bb362d57a53205d6dc8fde61"
+                "reference": "0e9db7f0b96b9f12dcf6f65bc34b72b1a30ea55a"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/thephpleague/flysystem/zipball/3828f0b24e2c1918bb362d57a53205d6dc8fde61",
-                "reference": "3828f0b24e2c1918bb362d57a53205d6dc8fde61",
+                "url": "https://api.github.com/repos/thephpleague/flysystem/zipball/0e9db7f0b96b9f12dcf6f65bc34b72b1a30ea55a",
+                "reference": "0e9db7f0b96b9f12dcf6f65bc34b72b1a30ea55a",
                 "shasum": ""
             },
             "require": {
+                "ext-fileinfo": "*",
                 "php": ">=5.5.9"
             },
             "conflict": {
                 "league/flysystem-sftp": "<1.0.6"
             },
             "require-dev": {
-                "ext-fileinfo": "*",
-                "mockery/mockery": "~0.9",
-                "phpspec/phpspec": "^2.2",
-                "phpunit/phpunit": "~4.8"
+                "phpspec/phpspec": "^3.4",
+                "phpunit/phpunit": "^5.7.10"
             },
             "suggest": {
                 "ext-fileinfo": "Required for MimeType",
+                "ext-ftp": "Allows you to use FTP server storage",
+                "ext-openssl": "Allows you to use FTPS server storage",
                 "league/flysystem-aws-s3-v2": "Allows you to use S3 storage with AWS SDK v2",
                 "league/flysystem-aws-s3-v3": "Allows you to use S3 storage with AWS SDK v3",
                 "league/flysystem-azure": "Allows you to use Windows Azure Blob storage",
                 "league/flysystem-cached-adapter": "Flysystem adapter decorator for metadata caching",
-                "league/flysystem-copy": "Allows you to use Copy.com storage",
                 "league/flysystem-eventable-filesystem": "Allows you to use EventableFilesystem",
                 "league/flysystem-rackspace": "Allows you to use Rackspace Cloud Files",
                 "league/flysystem-sftp": "Allows you to use SFTP server storage via phpseclib",
                 "league/flysystem-webdav": "Allows you to use WebDAV storage",
                 "league/flysystem-ziparchive": "Allows you to use ZipArchive adapter",
-                "spatie/flysystem-dropbox": "Allows you to use Dropbox storage"
+                "spatie/flysystem-dropbox": "Allows you to use Dropbox storage",
+                "srmklive/flysystem-dropbox-v2": "Allows you to use Dropbox storage for PHP 5 applications"
             },
             "type": "library",
             "extra": {
@@ -626,20 +1054,20 @@
                 "sftp",
                 "storage"
             ],
-            "time": "2017-04-28T10:15:08+00:00"
+            "time": "2019-10-16T21:01:05+00:00"
         },
         {
             "name": "monolog/monolog",
-            "version": "1.23.0",
+            "version": "1.25.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/Seldaek/monolog.git",
-                "reference": "fd8c787753b3a2ad11bc60c063cff1358a32a3b4"
+                "reference": "d5e2fb341cb44f7e2ab639d12a1e5901091ec287"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/Seldaek/monolog/zipball/fd8c787753b3a2ad11bc60c063cff1358a32a3b4",
-                "reference": "fd8c787753b3a2ad11bc60c063cff1358a32a3b4",
+                "url": "https://api.github.com/repos/Seldaek/monolog/zipball/d5e2fb341cb44f7e2ab639d12a1e5901091ec287",
+                "reference": "d5e2fb341cb44f7e2ab639d12a1e5901091ec287",
                 "shasum": ""
             },
             "require": {
@@ -704,32 +1132,47 @@
                 "logging",
                 "psr-3"
             ],
-            "time": "2017-06-19T01:22:40+00:00"
+            "time": "2019-11-13T10:00:05+00:00"
         },
         {
-            "name": "mtdowling/cron-expression",
-            "version": "v1.2.0",
+            "name": "nesbot/carbon",
+            "version": "1.39.1",
             "source": {
                 "type": "git",
-                "url": "https://github.com/mtdowling/cron-expression.git",
-                "reference": "9504fa9ea681b586028adaaa0877db4aecf32bad"
+                "url": "https://github.com/briannesbitt/Carbon.git",
+                "reference": "4be0c005164249208ce1b5ca633cd57bdd42ff33"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/mtdowling/cron-expression/zipball/9504fa9ea681b586028adaaa0877db4aecf32bad",
-                "reference": "9504fa9ea681b586028adaaa0877db4aecf32bad",
+                "url": "https://api.github.com/repos/briannesbitt/Carbon/zipball/4be0c005164249208ce1b5ca633cd57bdd42ff33",
+                "reference": "4be0c005164249208ce1b5ca633cd57bdd42ff33",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.2"
+                "kylekatarnls/update-helper": "^1.1",
+                "php": ">=5.3.9",
+                "symfony/translation": "~2.6 || ~3.0 || ~4.0"
             },
             "require-dev": {
-                "phpunit/phpunit": "~4.0|~5.0"
+                "composer/composer": "^1.2",
+                "friendsofphp/php-cs-fixer": "~2",
+                "phpunit/phpunit": "^4.8.35 || ^5.7"
             },
+            "bin": [
+                "bin/upgrade-carbon"
+            ],
             "type": "library",
+            "extra": {
+                "update-helper": "Carbon\\Upgrade",
+                "laravel": {
+                    "providers": [
+                        "Carbon\\Laravel\\ServiceProvider"
+                    ]
+                }
+            },
             "autoload": {
                 "psr-4": {
-                    "Cron\\": "src/Cron/"
+                    "": "src/"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -738,50 +1181,102 @@
             ],
             "authors": [
                 {
-                    "name": "Michael Dowling",
-                    "email": "mtdowling@gmail.com",
-                    "homepage": "https://github.com/mtdowling"
+                    "name": "Brian Nesbitt",
+                    "email": "brian@nesbot.com",
+                    "homepage": "http://nesbot.com"
                 }
             ],
-            "description": "CRON for PHP: Calculate the next or previous run date and determine if a CRON expression is due",
+            "description": "A simple API extension for DateTime.",
+            "homepage": "http://carbon.nesbot.com",
             "keywords": [
-                "cron",
-                "schedule"
+                "date",
+                "datetime",
+                "time"
             ],
-            "time": "2017-01-23T04:29:33+00:00"
+            "time": "2019-10-14T05:51:36+00:00"
         },
         {
-            "name": "nesbot/carbon",
-            "version": "1.22.1",
+            "name": "nexmo/client",
+            "version": "1.8.1",
             "source": {
                 "type": "git",
-                "url": "https://github.com/briannesbitt/Carbon.git",
-                "reference": "7cdf42c0b1cc763ab7e4c33c47a24e27c66bfccc"
+                "url": "https://github.com/Nexmo/nexmo-php.git",
+                "reference": "182d41a02ebd3e4be147baea45458ccfe2f528c4"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/briannesbitt/Carbon/zipball/7cdf42c0b1cc763ab7e4c33c47a24e27c66bfccc",
-                "reference": "7cdf42c0b1cc763ab7e4c33c47a24e27c66bfccc",
+                "url": "https://api.github.com/repos/Nexmo/nexmo-php/zipball/182d41a02ebd3e4be147baea45458ccfe2f528c4",
+                "reference": "182d41a02ebd3e4be147baea45458ccfe2f528c4",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.0",
-                "symfony/translation": "~2.6 || ~3.0"
+                "lcobucci/jwt": "^3.2",
+                "php": ">=5.6",
+                "php-http/client-implementation": "^1.0",
+                "php-http/guzzle6-adapter": "^1.0",
+                "zendframework/zend-diactoros": "^1.8.4 || ^2.0"
             },
             "require-dev": {
-                "friendsofphp/php-cs-fixer": "~2",
-                "phpunit/phpunit": "~4.0 || ~5.0"
+                "estahn/phpunit-json-assertions": "^1.0.0",
+                "php-http/mock-client": "^0.3.0",
+                "phpunit/phpunit": "^5.7",
+                "squizlabs/php_codesniffer": "^3.1"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Nexmo\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Tim Lytle",
+                    "email": "tim@nexmo.com",
+                    "homepage": "http://twitter.com/tjlytle",
+                    "role": "Developer"
+                }
+            ],
+            "description": "PHP Client for using Nexmo's API.",
+            "time": "2019-05-13T20:27:43+00:00"
+        },
+        {
+            "name": "opis/closure",
+            "version": "3.4.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/opis/closure.git",
+                "reference": "e79f851749c3caa836d7ccc01ede5828feb762c7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/opis/closure/zipball/e79f851749c3caa836d7ccc01ede5828feb762c7",
+                "reference": "e79f851749c3caa836d7ccc01ede5828feb762c7",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^5.4 || ^7.0"
+            },
+            "require-dev": {
+                "jeremeamia/superclosure": "^2.0",
+                "phpunit/phpunit": "^4.0 || ^5.0 || ^6.0 || ^7.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.23-dev"
+                    "dev-master": "3.3.x-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Carbon\\": "src/Carbon/"
-                }
+                    "Opis\\Closure\\": "src/"
+                },
+                "files": [
+                    "functions.php"
+                ]
             },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
@@ -789,49 +1284,51 @@
             ],
             "authors": [
                 {
-                    "name": "Brian Nesbitt",
-                    "email": "brian@nesbot.com",
-                    "homepage": "http://nesbot.com"
+                    "name": "Marius Sarca",
+                    "email": "marius.sarca@gmail.com"
+                },
+                {
+                    "name": "Sorin Sarca",
+                    "email": "sarca_sorin@hotmail.com"
                 }
             ],
-            "description": "A simple API extension for DateTime.",
-            "homepage": "http://carbon.nesbot.com",
+            "description": "A library that can be used to serialize closures (anonymous functions) and arbitrary objects.",
+            "homepage": "https://opis.io/closure",
             "keywords": [
-                "date",
-                "datetime",
-                "time"
-            ],
-            "time": "2017-01-16T07:55:07+00:00"
+                "anonymous functions",
+                "closure",
+                "function",
+                "serializable",
+                "serialization",
+                "serialize"
+            ],
+            "time": "2019-10-19T18:38:51+00:00"
         },
         {
             "name": "paragonie/random_compat",
-            "version": "v2.0.10",
+            "version": "v9.99.99",
             "source": {
                 "type": "git",
                 "url": "https://github.com/paragonie/random_compat.git",
-                "reference": "634bae8e911eefa89c1abfbf1b66da679ac8f54d"
+                "reference": "84b4dfb120c6f9b4ff7b3685f9b8f1aa365a0c95"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/paragonie/random_compat/zipball/634bae8e911eefa89c1abfbf1b66da679ac8f54d",
-                "reference": "634bae8e911eefa89c1abfbf1b66da679ac8f54d",
+                "url": "https://api.github.com/repos/paragonie/random_compat/zipball/84b4dfb120c6f9b4ff7b3685f9b8f1aa365a0c95",
+                "reference": "84b4dfb120c6f9b4ff7b3685f9b8f1aa365a0c95",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.2.0"
+                "php": "^7"
             },
             "require-dev": {
-                "phpunit/phpunit": "4.*|5.*"
+                "phpunit/phpunit": "4.*|5.*",
+                "vimeo/psalm": "^1"
             },
             "suggest": {
                 "ext-libsodium": "Provides a modern crypto API that can be used to generate random bytes."
             },
             "type": "library",
-            "autoload": {
-                "files": [
-                    "lib/random.php"
-                ]
-            },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
                 "MIT"
@@ -846,37 +1343,48 @@
             "description": "PHP 5.x polyfill for random_bytes() and random_int() from PHP 7",
             "keywords": [
                 "csprng",
+                "polyfill",
                 "pseudorandom",
                 "random"
             ],
-            "time": "2017-03-13T16:27:32+00:00"
+            "time": "2018-07-02T15:55:56+00:00"
         },
         {
-            "name": "psr/http-message",
-            "version": "1.0.1",
+            "name": "php-http/guzzle6-adapter",
+            "version": "v1.1.1",
             "source": {
                 "type": "git",
-                "url": "https://github.com/php-fig/http-message.git",
-                "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363"
+                "url": "https://github.com/php-http/guzzle6-adapter.git",
+                "reference": "a56941f9dc6110409cfcddc91546ee97039277ab"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/php-fig/http-message/zipball/f6561bf28d520154e4b0ec72be95418abe6d9363",
-                "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363",
+                "url": "https://api.github.com/repos/php-http/guzzle6-adapter/zipball/a56941f9dc6110409cfcddc91546ee97039277ab",
+                "reference": "a56941f9dc6110409cfcddc91546ee97039277ab",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.0"
+                "guzzlehttp/guzzle": "^6.0",
+                "php": ">=5.5.0",
+                "php-http/httplug": "^1.0"
+            },
+            "provide": {
+                "php-http/async-client-implementation": "1.0",
+                "php-http/client-implementation": "1.0"
+            },
+            "require-dev": {
+                "ext-curl": "*",
+                "php-http/adapter-integration-tests": "^0.4"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.0.x-dev"
+                    "dev-master": "1.2-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Psr\\Http\\Message\\": "src/"
+                    "Http\\Adapter\\Guzzle6\\": "src/"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -885,48 +1393,54 @@
             ],
             "authors": [
                 {
-                    "name": "PHP-FIG",
-                    "homepage": "http://www.php-fig.org/"
+                    "name": "Márk Sági-Kazár",
+                    "email": "mark.sagikazar@gmail.com"
+                },
+                {
+                    "name": "David de Boer",
+                    "email": "david@ddeboer.nl"
                 }
             ],
-            "description": "Common interface for HTTP messages",
-            "homepage": "https://github.com/php-fig/http-message",
+            "description": "Guzzle 6 HTTP Adapter",
+            "homepage": "http://httplug.io",
             "keywords": [
-                "http",
-                "http-message",
-                "psr",
-                "psr-7",
-                "request",
-                "response"
+                "Guzzle",
+                "http"
             ],
-            "time": "2016-08-06T14:39:51+00:00"
+            "time": "2016-05-10T06:13:32+00:00"
         },
         {
-            "name": "psr/log",
-            "version": "1.0.2",
+            "name": "php-http/httplug",
+            "version": "v1.1.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/php-fig/log.git",
-                "reference": "4ebe3a8bf773a19edfe0a84b6585ba3d401b724d"
+                "url": "https://github.com/php-http/httplug.git",
+                "reference": "1c6381726c18579c4ca2ef1ec1498fdae8bdf018"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/php-fig/log/zipball/4ebe3a8bf773a19edfe0a84b6585ba3d401b724d",
-                "reference": "4ebe3a8bf773a19edfe0a84b6585ba3d401b724d",
+                "url": "https://api.github.com/repos/php-http/httplug/zipball/1c6381726c18579c4ca2ef1ec1498fdae8bdf018",
+                "reference": "1c6381726c18579c4ca2ef1ec1498fdae8bdf018",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.0"
+                "php": ">=5.4",
+                "php-http/promise": "^1.0",
+                "psr/http-message": "^1.0"
+            },
+            "require-dev": {
+                "henrikbjorn/phpspec-code-coverage": "^1.0",
+                "phpspec/phpspec": "^2.4"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.0.x-dev"
+                    "dev-master": "1.1-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Psr\\Log\\": "Psr/Log/"
+                    "Http\\Client\\": "src/"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -935,71 +1449,49 @@
             ],
             "authors": [
                 {
-                    "name": "PHP-FIG",
-                    "homepage": "http://www.php-fig.org/"
+                    "name": "Eric GELOEN",
+                    "email": "geloen.eric@gmail.com"
+                },
+                {
+                    "name": "Márk Sági-Kazár",
+                    "email": "mark.sagikazar@gmail.com"
                 }
             ],
-            "description": "Common interface for logging libraries",
-            "homepage": "https://github.com/php-fig/log",
+            "description": "HTTPlug, the HTTP client abstraction for PHP",
+            "homepage": "http://httplug.io",
             "keywords": [
-                "log",
-                "psr",
-                "psr-3"
+                "client",
+                "http"
             ],
-            "time": "2016-10-10T12:19:37+00:00"
+            "time": "2016-08-31T08:30:17+00:00"
         },
         {
-            "name": "ramsey/uuid",
-            "version": "3.6.1",
+            "name": "php-http/promise",
+            "version": "v1.0.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/ramsey/uuid.git",
-                "reference": "4ae32dd9ab8860a4bbd750ad269cba7f06f7934e"
+                "url": "https://github.com/php-http/promise.git",
+                "reference": "dc494cdc9d7160b9a09bd5573272195242ce7980"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/ramsey/uuid/zipball/4ae32dd9ab8860a4bbd750ad269cba7f06f7934e",
-                "reference": "4ae32dd9ab8860a4bbd750ad269cba7f06f7934e",
+                "url": "https://api.github.com/repos/php-http/promise/zipball/dc494cdc9d7160b9a09bd5573272195242ce7980",
+                "reference": "dc494cdc9d7160b9a09bd5573272195242ce7980",
                 "shasum": ""
             },
-            "require": {
-                "paragonie/random_compat": "^1.0|^2.0",
-                "php": "^5.4 || ^7.0"
-            },
-            "replace": {
-                "rhumsaa/uuid": "self.version"
-            },
             "require-dev": {
-                "apigen/apigen": "^4.1",
-                "codeception/aspect-mock": "^1.0 | ^2.0",
-                "doctrine/annotations": "~1.2.0",
-                "goaop/framework": "1.0.0-alpha.2 | ^1.0 | ^2.1",
-                "ircmaxell/random-lib": "^1.1",
-                "jakub-onderka/php-parallel-lint": "^0.9.0",
-                "mockery/mockery": "^0.9.4",
-                "moontoast/math": "^1.1",
-                "php-mock/php-mock-phpunit": "^0.3|^1.1",
-                "phpunit/phpunit": "^4.7|>=5.0 <5.4",
-                "satooshi/php-coveralls": "^0.6.1",
-                "squizlabs/php_codesniffer": "^2.3"
-            },
-            "suggest": {
-                "ext-libsodium": "Provides the PECL libsodium extension for use with the SodiumRandomGenerator",
-                "ext-uuid": "Provides the PECL UUID extension for use with the PeclUuidTimeGenerator and PeclUuidRandomGenerator",
-                "ircmaxell/random-lib": "Provides RandomLib for use with the RandomLibAdapter",
-                "moontoast/math": "Provides support for converting UUID to 128-bit integer (in string form).",
-                "ramsey/uuid-console": "A console application for generating UUIDs with ramsey/uuid",
-                "ramsey/uuid-doctrine": "Allows the use of Ramsey\\Uuid\\Uuid as Doctrine field type."
+                "henrikbjorn/phpspec-code-coverage": "^1.0",
+                "phpspec/phpspec": "^2.4"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.x-dev"
+                    "dev-master": "1.1-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Ramsey\\Uuid\\": "src/"
+                    "Http\\Promise\\": "src/"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -1008,59 +1500,98 @@
             ],
             "authors": [
                 {
-                    "name": "Marijn Huizendveld",
-                    "email": "marijn.huizendveld@gmail.com"
-                },
-                {
-                    "name": "Thibaud Fabre",
-                    "email": "thibaud@aztech.io"
+                    "name": "Márk Sági-Kazár",
+                    "email": "mark.sagikazar@gmail.com"
                 },
                 {
-                    "name": "Ben Ramsey",
-                    "email": "ben@benramsey.com",
-                    "homepage": "https://benramsey.com"
+                    "name": "Joel Wurtz",
+                    "email": "joel.wurtz@gmail.com"
                 }
             ],
-            "description": "Formerly rhumsaa/uuid. A PHP 5.4+ library for generating RFC 4122 version 1, 3, 4, and 5 universally unique identifiers (UUID).",
-            "homepage": "https://github.com/ramsey/uuid",
+            "description": "Promise used for asynchronous HTTP requests",
+            "homepage": "http://httplug.io",
             "keywords": [
-                "guid",
-                "identifier",
-                "uuid"
+                "promise"
             ],
-            "time": "2017-03-26T20:37:53+00:00"
+            "time": "2016-01-26T13:27:02+00:00"
         },
         {
-            "name": "swiftmailer/swiftmailer",
-            "version": "v5.4.8",
+            "name": "predis/predis",
+            "version": "v1.1.1",
             "source": {
                 "type": "git",
-                "url": "https://github.com/swiftmailer/swiftmailer.git",
-                "reference": "9a06dc570a0367850280eefd3f1dc2da45aef517"
+                "url": "https://github.com/nrk/predis.git",
+                "reference": "f0210e38881631afeafb56ab43405a92cafd9fd1"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/swiftmailer/swiftmailer/zipball/9a06dc570a0367850280eefd3f1dc2da45aef517",
-                "reference": "9a06dc570a0367850280eefd3f1dc2da45aef517",
+                "url": "https://api.github.com/repos/nrk/predis/zipball/f0210e38881631afeafb56ab43405a92cafd9fd1",
+                "reference": "f0210e38881631afeafb56ab43405a92cafd9fd1",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.3"
+                "php": ">=5.3.9"
             },
             "require-dev": {
-                "mockery/mockery": "~0.9.1",
-                "symfony/phpunit-bridge": "~3.2"
+                "phpunit/phpunit": "~4.8"
+            },
+            "suggest": {
+                "ext-curl": "Allows access to Webdis when paired with phpiredis",
+                "ext-phpiredis": "Allows faster serialization and deserialization of the Redis protocol"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Predis\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Daniele Alessandri",
+                    "email": "suppakilla@gmail.com",
+                    "homepage": "http://clorophilla.net"
+                }
+            ],
+            "description": "Flexible and feature-complete Redis client for PHP and HHVM",
+            "homepage": "http://github.com/nrk/predis",
+            "keywords": [
+                "nosql",
+                "predis",
+                "redis"
+            ],
+            "time": "2016-06-16T16:22:20+00:00"
+        },
+        {
+            "name": "psr/container",
+            "version": "1.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/container.git",
+                "reference": "b7ce3b176482dbbc1245ebf52b181af44c2cf55f"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/container/zipball/b7ce3b176482dbbc1245ebf52b181af44c2cf55f",
+                "reference": "b7ce3b176482dbbc1245ebf52b181af44c2cf55f",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "5.4-dev"
+                    "dev-master": "1.0.x-dev"
                 }
             },
             "autoload": {
-                "files": [
-                    "lib/swift_required.php"
-                ]
+                "psr-4": {
+                    "Psr\\Container\\": "src/"
+                }
             },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
@@ -1068,68 +1599,852 @@
             ],
             "authors": [
                 {
-                    "name": "Chris Corbyn"
-                },
+                    "name": "PHP-FIG",
+                    "homepage": "http://www.php-fig.org/"
+                }
+            ],
+            "description": "Common Container Interface (PHP FIG PSR-11)",
+            "homepage": "https://github.com/php-fig/container",
+            "keywords": [
+                "PSR-11",
+                "container",
+                "container-interface",
+                "container-interop",
+                "psr"
+            ],
+            "time": "2017-02-14T16:28:37+00:00"
+        },
+        {
+            "name": "psr/http-factory",
+            "version": "1.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/http-factory.git",
+                "reference": "12ac7fcd07e5b077433f5f2bee95b3a771bf61be"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/http-factory/zipball/12ac7fcd07e5b077433f5f2bee95b3a771bf61be",
+                "reference": "12ac7fcd07e5b077433f5f2bee95b3a771bf61be",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.0.0",
+                "psr/http-message": "^1.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Psr\\Http\\Message\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
                 {
-                    "name": "Fabien Potencier",
-                    "email": "fabien@symfony.com"
+                    "name": "PHP-FIG",
+                    "homepage": "http://www.php-fig.org/"
                 }
             ],
-            "description": "Swiftmailer, free feature-rich PHP mailer",
-            "homepage": "http://swiftmailer.org",
+            "description": "Common interfaces for PSR-7 HTTP message factories",
             "keywords": [
-                "email",
-                "mail",
-                "mailer"
+                "factory",
+                "http",
+                "message",
+                "psr",
+                "psr-17",
+                "psr-7",
+                "request",
+                "response"
             ],
-            "time": "2017-05-01T15:54:03+00:00"
+            "time": "2019-04-30T12:38:16+00:00"
         },
         {
-            "name": "symfony/console",
-            "version": "v3.3.5",
+            "name": "psr/http-message",
+            "version": "1.0.1",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/console.git",
-                "reference": "a97e45d98c59510f085fa05225a1acb74dfe0546"
+                "url": "https://github.com/php-fig/http-message.git",
+                "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/console/zipball/a97e45d98c59510f085fa05225a1acb74dfe0546",
-                "reference": "a97e45d98c59510f085fa05225a1acb74dfe0546",
+                "url": "https://api.github.com/repos/php-fig/http-message/zipball/f6561bf28d520154e4b0ec72be95418abe6d9363",
+                "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9",
-                "symfony/debug": "~2.8|~3.0",
-                "symfony/polyfill-mbstring": "~1.0"
+                "php": ">=5.3.0"
             },
-            "conflict": {
-                "symfony/dependency-injection": "<3.3"
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0.x-dev"
+                }
             },
-            "require-dev": {
-                "psr/log": "~1.0",
-                "symfony/config": "~3.3",
-                "symfony/dependency-injection": "~3.3",
-                "symfony/event-dispatcher": "~2.8|~3.0",
-                "symfony/filesystem": "~2.8|~3.0",
-                "symfony/http-kernel": "~2.8|~3.0",
-                "symfony/process": "~2.8|~3.0"
+            "autoload": {
+                "psr-4": {
+                    "Psr\\Http\\Message\\": "src/"
+                }
             },
-            "suggest": {
-                "psr/log": "For using the console logger",
-                "symfony/event-dispatcher": "",
-                "symfony/filesystem": "",
-                "symfony/process": ""
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "http://www.php-fig.org/"
+                }
+            ],
+            "description": "Common interface for HTTP messages",
+            "homepage": "https://github.com/php-fig/http-message",
+            "keywords": [
+                "http",
+                "http-message",
+                "psr",
+                "psr-7",
+                "request",
+                "response"
+            ],
+            "time": "2016-08-06T14:39:51+00:00"
+        },
+        {
+            "name": "psr/log",
+            "version": "1.1.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/log.git",
+                "reference": "446d54b4cb6bf489fc9d75f55843658e6f25d801"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/log/zipball/446d54b4cb6bf489fc9d75f55843658e6f25d801",
+                "reference": "446d54b4cb6bf489fc9d75f55843658e6f25d801",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "1.1.x-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\Console\\": ""
+                    "Psr\\Log\\": "Psr/Log/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "http://www.php-fig.org/"
+                }
+            ],
+            "description": "Common interface for logging libraries",
+            "homepage": "https://github.com/php-fig/log",
+            "keywords": [
+                "log",
+                "psr",
+                "psr-3"
+            ],
+            "time": "2019-11-01T11:05:21+00:00"
+        },
+        {
+            "name": "psr/simple-cache",
+            "version": "1.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/simple-cache.git",
+                "reference": "408d5eafb83c57f6365a3ca330ff23aa4a5fa39b"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/simple-cache/zipball/408d5eafb83c57f6365a3ca330ff23aa4a5fa39b",
+                "reference": "408d5eafb83c57f6365a3ca330ff23aa4a5fa39b",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Psr\\SimpleCache\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "http://www.php-fig.org/"
+                }
+            ],
+            "description": "Common interfaces for simple caching",
+            "keywords": [
+                "cache",
+                "caching",
+                "psr",
+                "psr-16",
+                "simple-cache"
+            ],
+            "time": "2017-10-23T01:57:42+00:00"
+        },
+        {
+            "name": "ralouphie/getallheaders",
+            "version": "3.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ralouphie/getallheaders.git",
+                "reference": "120b605dfeb996808c31b6477290a714d356e822"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ralouphie/getallheaders/zipball/120b605dfeb996808c31b6477290a714d356e822",
+                "reference": "120b605dfeb996808c31b6477290a714d356e822",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.6"
+            },
+            "require-dev": {
+                "php-coveralls/php-coveralls": "^2.1",
+                "phpunit/phpunit": "^5 || ^6.5"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/getallheaders.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Ralph Khattar",
+                    "email": "ralph.khattar@gmail.com"
+                }
+            ],
+            "description": "A polyfill for getallheaders.",
+            "time": "2019-03-08T08:55:37+00:00"
+        },
+        {
+            "name": "ramsey/uuid",
+            "version": "3.8.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ramsey/uuid.git",
+                "reference": "d09ea80159c1929d75b3f9c60504d613aeb4a1e3"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ramsey/uuid/zipball/d09ea80159c1929d75b3f9c60504d613aeb4a1e3",
+                "reference": "d09ea80159c1929d75b3f9c60504d613aeb4a1e3",
+                "shasum": ""
+            },
+            "require": {
+                "paragonie/random_compat": "^1.0|^2.0|9.99.99",
+                "php": "^5.4 || ^7.0",
+                "symfony/polyfill-ctype": "^1.8"
+            },
+            "replace": {
+                "rhumsaa/uuid": "self.version"
+            },
+            "require-dev": {
+                "codeception/aspect-mock": "^1.0 | ~2.0.0",
+                "doctrine/annotations": "~1.2.0",
+                "goaop/framework": "1.0.0-alpha.2 | ^1.0 | ~2.1.0",
+                "ircmaxell/random-lib": "^1.1",
+                "jakub-onderka/php-parallel-lint": "^0.9.0",
+                "mockery/mockery": "^0.9.9",
+                "moontoast/math": "^1.1",
+                "php-mock/php-mock-phpunit": "^0.3|^1.1",
+                "phpunit/phpunit": "^4.7|^5.0|^6.5",
+                "squizlabs/php_codesniffer": "^2.3"
+            },
+            "suggest": {
+                "ext-ctype": "Provides support for PHP Ctype functions",
+                "ext-libsodium": "Provides the PECL libsodium extension for use with the SodiumRandomGenerator",
+                "ext-uuid": "Provides the PECL UUID extension for use with the PeclUuidTimeGenerator and PeclUuidRandomGenerator",
+                "ircmaxell/random-lib": "Provides RandomLib for use with the RandomLibAdapter",
+                "moontoast/math": "Provides support for converting UUID to 128-bit integer (in string form).",
+                "ramsey/uuid-console": "A console application for generating UUIDs with ramsey/uuid",
+                "ramsey/uuid-doctrine": "Allows the use of Ramsey\\Uuid\\Uuid as Doctrine field type."
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Ramsey\\Uuid\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Marijn Huizendveld",
+                    "email": "marijn.huizendveld@gmail.com"
+                },
+                {
+                    "name": "Thibaud Fabre",
+                    "email": "thibaud@aztech.io"
+                },
+                {
+                    "name": "Ben Ramsey",
+                    "email": "ben@benramsey.com",
+                    "homepage": "https://benramsey.com"
+                }
+            ],
+            "description": "Formerly rhumsaa/uuid. A PHP 5.4+ library for generating RFC 4122 version 1, 3, 4, and 5 universally unique identifiers (UUID).",
+            "homepage": "https://github.com/ramsey/uuid",
+            "keywords": [
+                "guid",
+                "identifier",
+                "uuid"
+            ],
+            "time": "2018-07-19T23:38:55+00:00"
+        },
+        {
+            "name": "swiftmailer/swiftmailer",
+            "version": "v6.2.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/swiftmailer/swiftmailer.git",
+                "reference": "149cfdf118b169f7840bbe3ef0d4bc795d1780c9"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/swiftmailer/swiftmailer/zipball/149cfdf118b169f7840bbe3ef0d4bc795d1780c9",
+                "reference": "149cfdf118b169f7840bbe3ef0d4bc795d1780c9",
+                "shasum": ""
+            },
+            "require": {
+                "egulias/email-validator": "~2.0",
+                "php": ">=7.0.0",
+                "symfony/polyfill-iconv": "^1.0",
+                "symfony/polyfill-intl-idn": "^1.10",
+                "symfony/polyfill-mbstring": "^1.0"
+            },
+            "require-dev": {
+                "mockery/mockery": "~0.9.1",
+                "symfony/phpunit-bridge": "^3.4.19|^4.1.8"
+            },
+            "suggest": {
+                "ext-intl": "Needed to support internationalized email addresses",
+                "true/punycode": "Needed to support internationalized email addresses, if ext-intl is not installed"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "6.2-dev"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "lib/swift_required.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Chris Corbyn"
+                },
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                }
+            ],
+            "description": "Swiftmailer, free feature-rich PHP mailer",
+            "homepage": "https://swiftmailer.symfony.com",
+            "keywords": [
+                "email",
+                "mail",
+                "mailer"
+            ],
+            "time": "2019-11-12T09:31:26+00:00"
+        },
+        {
+            "name": "symfony/console",
+            "version": "v4.4.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/console.git",
+                "reference": "35d9077f495c6d184d9930f7a7ecbd1ad13c7ab8"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/console/zipball/35d9077f495c6d184d9930f7a7ecbd1ad13c7ab8",
+                "reference": "35d9077f495c6d184d9930f7a7ecbd1ad13c7ab8",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1.3",
+                "symfony/polyfill-mbstring": "~1.0",
+                "symfony/polyfill-php73": "^1.8",
+                "symfony/service-contracts": "^1.1|^2"
+            },
+            "conflict": {
+                "symfony/dependency-injection": "<3.4",
+                "symfony/event-dispatcher": "<4.3|>=5",
+                "symfony/lock": "<4.4",
+                "symfony/process": "<3.3"
+            },
+            "provide": {
+                "psr/log-implementation": "1.0"
+            },
+            "require-dev": {
+                "psr/log": "~1.0",
+                "symfony/config": "^3.4|^4.0|^5.0",
+                "symfony/dependency-injection": "^3.4|^4.0|^5.0",
+                "symfony/event-dispatcher": "^4.3",
+                "symfony/lock": "^4.4|^5.0",
+                "symfony/process": "^3.4|^4.0|^5.0",
+                "symfony/var-dumper": "^4.3|^5.0"
+            },
+            "suggest": {
+                "psr/log": "For using the console logger",
+                "symfony/event-dispatcher": "",
+                "symfony/lock": "",
+                "symfony/process": ""
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.4-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Console\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony Console Component",
+            "homepage": "https://symfony.com",
+            "time": "2019-11-13T07:39:40+00:00"
+        },
+        {
+            "name": "symfony/css-selector",
+            "version": "v3.1.10",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/css-selector.git",
+                "reference": "722a87478a72d95dc2a3bcf41dc9c2d13fd4cb2d"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/css-selector/zipball/722a87478a72d95dc2a3bcf41dc9c2d13fd4cb2d",
+                "reference": "722a87478a72d95dc2a3bcf41dc9c2d13fd4cb2d",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.5.9"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.1-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\CssSelector\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Jean-François Simon",
+                    "email": "jeanfrancois.simon@sensiolabs.com"
+                },
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony CssSelector Component",
+            "homepage": "https://symfony.com",
+            "time": "2017-01-02T20:31:54+00:00"
+        },
+        {
+            "name": "symfony/debug",
+            "version": "v4.4.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/debug.git",
+                "reference": "b24b791f817116b29e52a63e8544884cf9a40757"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/debug/zipball/b24b791f817116b29e52a63e8544884cf9a40757",
+                "reference": "b24b791f817116b29e52a63e8544884cf9a40757",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1.3",
+                "psr/log": "~1.0"
+            },
+            "conflict": {
+                "symfony/http-kernel": "<3.4"
+            },
+            "require-dev": {
+                "symfony/http-kernel": "^3.4|^4.0|^5.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.4-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Debug\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony Debug Component",
+            "homepage": "https://symfony.com",
+            "time": "2019-11-10T17:54:30+00:00"
+        },
+        {
+            "name": "symfony/error-handler",
+            "version": "v4.4.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/error-handler.git",
+                "reference": "e1acb58dc6a8722617fe56565f742bcf7e8744bf"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/error-handler/zipball/e1acb58dc6a8722617fe56565f742bcf7e8744bf",
+                "reference": "e1acb58dc6a8722617fe56565f742bcf7e8744bf",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1.3",
+                "psr/log": "~1.0",
+                "symfony/debug": "^4.4",
+                "symfony/var-dumper": "^4.4|^5.0"
+            },
+            "require-dev": {
+                "symfony/http-kernel": "^4.4|^5.0",
+                "symfony/serializer": "^4.4|^5.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.4-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\ErrorHandler\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony ErrorHandler Component",
+            "homepage": "https://symfony.com",
+            "time": "2019-11-17T22:49:13+00:00"
+        },
+        {
+            "name": "symfony/event-dispatcher",
+            "version": "v4.4.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/event-dispatcher.git",
+                "reference": "ab1c43e17fff802bef0a898f3bc088ac33b8e0e1"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/event-dispatcher/zipball/ab1c43e17fff802bef0a898f3bc088ac33b8e0e1",
+                "reference": "ab1c43e17fff802bef0a898f3bc088ac33b8e0e1",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1.3",
+                "symfony/event-dispatcher-contracts": "^1.1"
+            },
+            "conflict": {
+                "symfony/dependency-injection": "<3.4"
+            },
+            "provide": {
+                "psr/event-dispatcher-implementation": "1.0",
+                "symfony/event-dispatcher-implementation": "1.1"
+            },
+            "require-dev": {
+                "psr/log": "~1.0",
+                "symfony/config": "^3.4|^4.0|^5.0",
+                "symfony/dependency-injection": "^3.4|^4.0|^5.0",
+                "symfony/expression-language": "^3.4|^4.0|^5.0",
+                "symfony/http-foundation": "^3.4|^4.0|^5.0",
+                "symfony/service-contracts": "^1.1|^2",
+                "symfony/stopwatch": "^3.4|^4.0|^5.0"
+            },
+            "suggest": {
+                "symfony/dependency-injection": "",
+                "symfony/http-kernel": ""
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.4-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\EventDispatcher\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony EventDispatcher Component",
+            "homepage": "https://symfony.com",
+            "time": "2019-11-08T22:40:51+00:00"
+        },
+        {
+            "name": "symfony/event-dispatcher-contracts",
+            "version": "v1.1.7",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/event-dispatcher-contracts.git",
+                "reference": "c43ab685673fb6c8d84220c77897b1d6cdbe1d18"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/event-dispatcher-contracts/zipball/c43ab685673fb6c8d84220c77897b1d6cdbe1d18",
+                "reference": "c43ab685673fb6c8d84220c77897b1d6cdbe1d18",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1.3"
+            },
+            "suggest": {
+                "psr/event-dispatcher": "",
+                "symfony/event-dispatcher-implementation": ""
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.1-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Contracts\\EventDispatcher\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Generic abstractions related to dispatching event",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "abstractions",
+                "contracts",
+                "decoupling",
+                "interfaces",
+                "interoperability",
+                "standards"
+            ],
+            "time": "2019-09-17T09:54:03+00:00"
+        },
+        {
+            "name": "symfony/finder",
+            "version": "v4.4.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/finder.git",
+                "reference": "ce8743441da64c41e2a667b8eb66070444ed911e"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/finder/zipball/ce8743441da64c41e2a667b8eb66070444ed911e",
+                "reference": "ce8743441da64c41e2a667b8eb66070444ed911e",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.4-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Finder\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony Finder Component",
+            "homepage": "https://symfony.com",
+            "time": "2019-11-17T21:56:56+00:00"
+        },
+        {
+            "name": "symfony/http-foundation",
+            "version": "v4.4.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/http-foundation.git",
+                "reference": "502040dd2b0cf0a292defeb6145f4d7a4753c99c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/http-foundation/zipball/502040dd2b0cf0a292defeb6145f4d7a4753c99c",
+                "reference": "502040dd2b0cf0a292defeb6145f4d7a4753c99c",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1.3",
+                "symfony/mime": "^4.3|^5.0",
+                "symfony/polyfill-mbstring": "~1.1"
+            },
+            "require-dev": {
+                "predis/predis": "~1.0",
+                "symfony/expression-language": "^3.4|^4.0|^5.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.4-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\HttpFoundation\\": ""
                 },
                 "exclude-from-classmap": [
                     "/Tests/"
@@ -1149,36 +2464,77 @@
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony Console Component",
+            "description": "Symfony HttpFoundation Component",
             "homepage": "https://symfony.com",
-            "time": "2017-07-03T13:19:36+00:00"
+            "time": "2019-11-17T10:10:42+00:00"
         },
         {
-            "name": "symfony/css-selector",
-            "version": "v3.1.10",
+            "name": "symfony/http-kernel",
+            "version": "v4.4.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/css-selector.git",
-                "reference": "722a87478a72d95dc2a3bcf41dc9c2d13fd4cb2d"
+                "url": "https://github.com/symfony/http-kernel.git",
+                "reference": "5a5e7237d928aa98ff8952050cbbf0135899b6b0"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/css-selector/zipball/722a87478a72d95dc2a3bcf41dc9c2d13fd4cb2d",
-                "reference": "722a87478a72d95dc2a3bcf41dc9c2d13fd4cb2d",
+                "url": "https://api.github.com/repos/symfony/http-kernel/zipball/5a5e7237d928aa98ff8952050cbbf0135899b6b0",
+                "reference": "5a5e7237d928aa98ff8952050cbbf0135899b6b0",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9"
+                "php": "^7.1.3",
+                "psr/log": "~1.0",
+                "symfony/error-handler": "^4.4",
+                "symfony/event-dispatcher": "^4.4",
+                "symfony/http-foundation": "^4.4|^5.0",
+                "symfony/polyfill-ctype": "^1.8",
+                "symfony/polyfill-php73": "^1.9"
+            },
+            "conflict": {
+                "symfony/browser-kit": "<4.3",
+                "symfony/config": "<3.4",
+                "symfony/console": ">=5",
+                "symfony/dependency-injection": "<4.3",
+                "symfony/translation": "<4.2",
+                "twig/twig": "<1.34|<2.4,>=2"
+            },
+            "provide": {
+                "psr/log-implementation": "1.0"
+            },
+            "require-dev": {
+                "psr/cache": "~1.0",
+                "symfony/browser-kit": "^4.3|^5.0",
+                "symfony/config": "^3.4|^4.0|^5.0",
+                "symfony/console": "^3.4|^4.0",
+                "symfony/css-selector": "^3.4|^4.0|^5.0",
+                "symfony/dependency-injection": "^4.3|^5.0",
+                "symfony/dom-crawler": "^3.4|^4.0|^5.0",
+                "symfony/expression-language": "^3.4|^4.0|^5.0",
+                "symfony/finder": "^3.4|^4.0|^5.0",
+                "symfony/process": "^3.4|^4.0|^5.0",
+                "symfony/routing": "^3.4|^4.0|^5.0",
+                "symfony/stopwatch": "^3.4|^4.0|^5.0",
+                "symfony/templating": "^3.4|^4.0|^5.0",
+                "symfony/translation": "^4.2|^5.0",
+                "symfony/translation-contracts": "^1.1|^2",
+                "twig/twig": "^1.34|^2.4|^3.0"
+            },
+            "suggest": {
+                "symfony/browser-kit": "",
+                "symfony/config": "",
+                "symfony/console": "",
+                "symfony/dependency-injection": ""
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.1-dev"
+                    "dev-master": "4.4-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\CssSelector\\": ""
+                    "Symfony\\Component\\HttpKernel\\": ""
                 },
                 "exclude-from-classmap": [
                     "/Tests/"
@@ -1189,10 +2545,6 @@
                 "MIT"
             ],
             "authors": [
-                {
-                    "name": "Jean-François Simon",
-                    "email": "jeanfrancois.simon@sensiolabs.com"
-                },
                 {
                     "name": "Fabien Potencier",
                     "email": "fabien@symfony.com"
@@ -1202,43 +2554,45 @@
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony CssSelector Component",
+            "description": "Symfony HttpKernel Component",
             "homepage": "https://symfony.com",
-            "time": "2017-01-02T20:31:54+00:00"
+            "time": "2019-11-21T07:08:15+00:00"
         },
         {
-            "name": "symfony/debug",
-            "version": "v3.3.5",
+            "name": "symfony/mime",
+            "version": "v5.0.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/debug.git",
-                "reference": "63b85a968486d95ff9542228dc2e4247f16f9743"
+                "url": "https://github.com/symfony/mime.git",
+                "reference": "76f3c09b7382bf979af7bcd8e6f8033f1324285e"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/debug/zipball/63b85a968486d95ff9542228dc2e4247f16f9743",
-                "reference": "63b85a968486d95ff9542228dc2e4247f16f9743",
+                "url": "https://api.github.com/repos/symfony/mime/zipball/76f3c09b7382bf979af7bcd8e6f8033f1324285e",
+                "reference": "76f3c09b7382bf979af7bcd8e6f8033f1324285e",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9",
-                "psr/log": "~1.0"
+                "php": "^7.2.5",
+                "symfony/polyfill-intl-idn": "^1.10",
+                "symfony/polyfill-mbstring": "^1.0"
             },
             "conflict": {
-                "symfony/http-kernel": ">=2.3,<2.3.24|~2.4.0|>=2.5,<2.5.9|>=2.6,<2.6.2"
+                "symfony/mailer": "<4.4"
             },
             "require-dev": {
-                "symfony/http-kernel": "~2.8|~3.0"
+                "egulias/email-validator": "^2.1.10",
+                "symfony/dependency-injection": "^4.4|^5.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "5.0-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\Debug\\": ""
+                    "Symfony\\Component\\Mime\\": ""
                 },
                 "exclude-from-classmap": [
                     "/Tests/"
@@ -1258,53 +2612,46 @@
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony Debug Component",
+            "description": "A library to manipulate MIME messages",
             "homepage": "https://symfony.com",
-            "time": "2017-07-05T13:02:37+00:00"
+            "keywords": [
+                "mime",
+                "mime-type"
+            ],
+            "time": "2019-11-18T17:27:11+00:00"
         },
         {
-            "name": "symfony/event-dispatcher",
-            "version": "v3.3.5",
+            "name": "symfony/polyfill-ctype",
+            "version": "v1.12.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/event-dispatcher.git",
-                "reference": "67535f1e3fd662bdc68d7ba317c93eecd973617e"
+                "url": "https://github.com/symfony/polyfill-ctype.git",
+                "reference": "550ebaac289296ce228a706d0867afc34687e3f4"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/event-dispatcher/zipball/67535f1e3fd662bdc68d7ba317c93eecd973617e",
-                "reference": "67535f1e3fd662bdc68d7ba317c93eecd973617e",
+                "url": "https://api.github.com/repos/symfony/polyfill-ctype/zipball/550ebaac289296ce228a706d0867afc34687e3f4",
+                "reference": "550ebaac289296ce228a706d0867afc34687e3f4",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9"
-            },
-            "conflict": {
-                "symfony/dependency-injection": "<3.3"
-            },
-            "require-dev": {
-                "psr/log": "~1.0",
-                "symfony/config": "~2.8|~3.0",
-                "symfony/dependency-injection": "~3.3",
-                "symfony/expression-language": "~2.8|~3.0",
-                "symfony/stopwatch": "~2.8|~3.0"
+                "php": ">=5.3.3"
             },
             "suggest": {
-                "symfony/dependency-injection": "",
-                "symfony/http-kernel": ""
+                "ext-ctype": "For best performance"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "1.12-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\EventDispatcher\\": ""
+                    "Symfony\\Polyfill\\Ctype\\": ""
                 },
-                "exclude-from-classmap": [
-                    "/Tests/"
+                "files": [
+                    "bootstrap.php"
                 ]
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -1313,47 +2660,56 @@
             ],
             "authors": [
                 {
-                    "name": "Fabien Potencier",
-                    "email": "fabien@symfony.com"
+                    "name": "Gert de Pagter",
+                    "email": "BackEndTea@gmail.com"
                 },
                 {
                     "name": "Symfony Community",
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony EventDispatcher Component",
+            "description": "Symfony polyfill for ctype functions",
             "homepage": "https://symfony.com",
-            "time": "2017-06-09T14:53:08+00:00"
+            "keywords": [
+                "compatibility",
+                "ctype",
+                "polyfill",
+                "portable"
+            ],
+            "time": "2019-08-06T08:03:45+00:00"
         },
         {
-            "name": "symfony/finder",
-            "version": "v3.3.5",
+            "name": "symfony/polyfill-iconv",
+            "version": "v1.12.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/finder.git",
-                "reference": "baea7f66d30854ad32988c11a09d7ffd485810c4"
+                "url": "https://github.com/symfony/polyfill-iconv.git",
+                "reference": "685968b11e61a347c18bf25db32effa478be610f"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/finder/zipball/baea7f66d30854ad32988c11a09d7ffd485810c4",
-                "reference": "baea7f66d30854ad32988c11a09d7ffd485810c4",
+                "url": "https://api.github.com/repos/symfony/polyfill-iconv/zipball/685968b11e61a347c18bf25db32effa478be610f",
+                "reference": "685968b11e61a347c18bf25db32effa478be610f",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9"
+                "php": ">=5.3.3"
+            },
+            "suggest": {
+                "ext-iconv": "For best performance"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "1.12-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\Finder\\": ""
+                    "Symfony\\Polyfill\\Iconv\\": ""
                 },
-                "exclude-from-classmap": [
-                    "/Tests/"
+                "files": [
+                    "bootstrap.php"
                 ]
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -1362,51 +2718,59 @@
             ],
             "authors": [
                 {
-                    "name": "Fabien Potencier",
-                    "email": "fabien@symfony.com"
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
                 },
                 {
                     "name": "Symfony Community",
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony Finder Component",
+            "description": "Symfony polyfill for the Iconv extension",
             "homepage": "https://symfony.com",
-            "time": "2017-06-01T21:01:25+00:00"
+            "keywords": [
+                "compatibility",
+                "iconv",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "time": "2019-08-06T08:03:45+00:00"
         },
         {
-            "name": "symfony/http-foundation",
-            "version": "v3.3.5",
+            "name": "symfony/polyfill-intl-idn",
+            "version": "v1.12.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/http-foundation.git",
-                "reference": "e307abe4b79ccbbfdced9b91c132fd128f456bc5"
+                "url": "https://github.com/symfony/polyfill-intl-idn.git",
+                "reference": "6af626ae6fa37d396dc90a399c0ff08e5cfc45b2"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/http-foundation/zipball/e307abe4b79ccbbfdced9b91c132fd128f456bc5",
-                "reference": "e307abe4b79ccbbfdced9b91c132fd128f456bc5",
+                "url": "https://api.github.com/repos/symfony/polyfill-intl-idn/zipball/6af626ae6fa37d396dc90a399c0ff08e5cfc45b2",
+                "reference": "6af626ae6fa37d396dc90a399c0ff08e5cfc45b2",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9",
-                "symfony/polyfill-mbstring": "~1.1"
+                "php": ">=5.3.3",
+                "symfony/polyfill-mbstring": "^1.3",
+                "symfony/polyfill-php72": "^1.9"
             },
-            "require-dev": {
-                "symfony/expression-language": "~2.8|~3.0"
+            "suggest": {
+                "ext-intl": "For best performance"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "1.12-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\HttpFoundation\\": ""
+                    "Symfony\\Polyfill\\Intl\\Idn\\": ""
                 },
-                "exclude-from-classmap": [
-                    "/Tests/"
+                "files": [
+                    "bootstrap.php"
                 ]
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -1415,84 +2779,58 @@
             ],
             "authors": [
                 {
-                    "name": "Fabien Potencier",
-                    "email": "fabien@symfony.com"
+                    "name": "Laurent Bassin",
+                    "email": "laurent@bassin.info"
                 },
                 {
                     "name": "Symfony Community",
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony HttpFoundation Component",
+            "description": "Symfony polyfill for intl's idn_to_ascii and idn_to_utf8 functions",
             "homepage": "https://symfony.com",
-            "time": "2017-07-17T14:07:10+00:00"
+            "keywords": [
+                "compatibility",
+                "idn",
+                "intl",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "time": "2019-08-06T08:03:45+00:00"
         },
         {
-            "name": "symfony/http-kernel",
-            "version": "v3.3.5",
+            "name": "symfony/polyfill-mbstring",
+            "version": "v1.12.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/http-kernel.git",
-                "reference": "16ceea64d23abddf58797a782ae96a5242282cd8"
+                "url": "https://github.com/symfony/polyfill-mbstring.git",
+                "reference": "b42a2f66e8f1b15ccf25652c3424265923eb4f17"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/http-kernel/zipball/16ceea64d23abddf58797a782ae96a5242282cd8",
-                "reference": "16ceea64d23abddf58797a782ae96a5242282cd8",
+                "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/b42a2f66e8f1b15ccf25652c3424265923eb4f17",
+                "reference": "b42a2f66e8f1b15ccf25652c3424265923eb4f17",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9",
-                "psr/log": "~1.0",
-                "symfony/debug": "~2.8|~3.0",
-                "symfony/event-dispatcher": "~2.8|~3.0",
-                "symfony/http-foundation": "~3.3"
-            },
-            "conflict": {
-                "symfony/config": "<2.8",
-                "symfony/dependency-injection": "<3.3",
-                "symfony/var-dumper": "<3.3",
-                "twig/twig": "<1.34|<2.4,>=2"
-            },
-            "require-dev": {
-                "psr/cache": "~1.0",
-                "symfony/browser-kit": "~2.8|~3.0",
-                "symfony/class-loader": "~2.8|~3.0",
-                "symfony/config": "~2.8|~3.0",
-                "symfony/console": "~2.8|~3.0",
-                "symfony/css-selector": "~2.8|~3.0",
-                "symfony/dependency-injection": "~3.3",
-                "symfony/dom-crawler": "~2.8|~3.0",
-                "symfony/expression-language": "~2.8|~3.0",
-                "symfony/finder": "~2.8|~3.0",
-                "symfony/process": "~2.8|~3.0",
-                "symfony/routing": "~2.8|~3.0",
-                "symfony/stopwatch": "~2.8|~3.0",
-                "symfony/templating": "~2.8|~3.0",
-                "symfony/translation": "~2.8|~3.0",
-                "symfony/var-dumper": "~3.3"
+                "php": ">=5.3.3"
             },
             "suggest": {
-                "symfony/browser-kit": "",
-                "symfony/class-loader": "",
-                "symfony/config": "",
-                "symfony/console": "",
-                "symfony/dependency-injection": "",
-                "symfony/finder": "",
-                "symfony/var-dumper": ""
+                "ext-mbstring": "For best performance"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "1.12-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\HttpKernel\\": ""
+                    "Symfony\\Polyfill\\Mbstring\\": ""
                 },
-                "exclude-from-classmap": [
-                    "/Tests/"
+                "files": [
+                    "bootstrap.php"
                 ]
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -1501,57 +2839,54 @@
             ],
             "authors": [
                 {
-                    "name": "Fabien Potencier",
-                    "email": "fabien@symfony.com"
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
                 },
                 {
                     "name": "Symfony Community",
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony HttpKernel Component",
+            "description": "Symfony polyfill for the Mbstring extension",
             "homepage": "https://symfony.com",
-            "time": "2017-07-17T19:08:23+00:00"
+            "keywords": [
+                "compatibility",
+                "mbstring",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "time": "2019-08-06T08:03:45+00:00"
         },
         {
-            "name": "symfony/intl",
-            "version": "v3.3.5",
+            "name": "symfony/polyfill-php72",
+            "version": "v1.12.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/intl.git",
-                "reference": "a310b29a794578f544305f4f48e3f6c7981b606c"
+                "url": "https://github.com/symfony/polyfill-php72.git",
+                "reference": "04ce3335667451138df4307d6a9b61565560199e"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/intl/zipball/a310b29a794578f544305f4f48e3f6c7981b606c",
-                "reference": "a310b29a794578f544305f4f48e3f6c7981b606c",
+                "url": "https://api.github.com/repos/symfony/polyfill-php72/zipball/04ce3335667451138df4307d6a9b61565560199e",
+                "reference": "04ce3335667451138df4307d6a9b61565560199e",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9",
-                "symfony/polyfill-intl-icu": "~1.0"
-            },
-            "require-dev": {
-                "symfony/filesystem": "~2.8|~3.0"
-            },
-            "suggest": {
-                "ext-intl": "to use the component with locales other than \"en\""
+                "php": ">=5.3.3"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "1.12-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\Intl\\": ""
+                    "Symfony\\Polyfill\\Php72\\": ""
                 },
-                "classmap": [
-                    "Resources/stubs"
-                ],
-                "exclude-from-classmap": [
-                    "/Tests/"
+                "files": [
+                    "bootstrap.php"
                 ]
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -1560,95 +2895,56 @@
             ],
             "authors": [
                 {
-                    "name": "Bernhard Schussek",
-                    "email": "bschussek@gmail.com"
-                },
-                {
-                    "name": "Eriksen Costa",
-                    "email": "eriksen.costa@infranology.com.br"
-                },
-                {
-                    "name": "Igor Wiedler",
-                    "email": "igor@wiedler.ch"
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
                 },
                 {
                     "name": "Symfony Community",
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "A PHP replacement layer for the C intl extension that includes additional data from the ICU library.",
+            "description": "Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions",
             "homepage": "https://symfony.com",
             "keywords": [
-                "i18n",
-                "icu",
-                "internationalization",
-                "intl",
-                "l10n",
-                "localization"
+                "compatibility",
+                "polyfill",
+                "portable",
+                "shim"
             ],
-            "time": "2017-06-01T21:01:25+00:00"
+            "time": "2019-08-06T08:03:45+00:00"
         },
         {
-            "name": "symfony/polyfill",
-            "version": "v1.2.0",
+            "name": "symfony/polyfill-php73",
+            "version": "v1.12.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/polyfill.git",
-                "reference": "ee2c9c2576fdd4a42b024260a1906a9888770c34"
+                "url": "https://github.com/symfony/polyfill-php73.git",
+                "reference": "2ceb49eaccb9352bff54d22570276bb75ba4a188"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/polyfill/zipball/ee2c9c2576fdd4a42b024260a1906a9888770c34",
-                "reference": "ee2c9c2576fdd4a42b024260a1906a9888770c34",
+                "url": "https://api.github.com/repos/symfony/polyfill-php73/zipball/2ceb49eaccb9352bff54d22570276bb75ba4a188",
+                "reference": "2ceb49eaccb9352bff54d22570276bb75ba4a188",
                 "shasum": ""
             },
             "require": {
-                "ircmaxell/password-compat": "~1.0",
-                "paragonie/random_compat": "~1.0|~2.0",
-                "php": ">=5.3.3",
-                "symfony/intl": "~2.3|~3.0"
-            },
-            "replace": {
-                "symfony/polyfill-apcu": "self.version",
-                "symfony/polyfill-iconv": "self.version",
-                "symfony/polyfill-intl-grapheme": "self.version",
-                "symfony/polyfill-intl-icu": "self.version",
-                "symfony/polyfill-intl-normalizer": "self.version",
-                "symfony/polyfill-mbstring": "self.version",
-                "symfony/polyfill-php54": "self.version",
-                "symfony/polyfill-php55": "self.version",
-                "symfony/polyfill-php56": "self.version",
-                "symfony/polyfill-php70": "self.version",
-                "symfony/polyfill-util": "self.version",
-                "symfony/polyfill-xml": "self.version"
+                "php": ">=5.3.3"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.2-dev"
+                    "dev-master": "1.12-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Polyfill\\": "src/"
+                    "Symfony\\Polyfill\\Php73\\": ""
                 },
                 "files": [
-                    "src/Apcu/bootstrap.php",
-                    "src/Php54/bootstrap.php",
-                    "src/Php55/bootstrap.php",
-                    "src/Php56/bootstrap.php",
-                    "src/Php70/bootstrap.php",
-                    "src/Iconv/bootstrap.php",
-                    "src/Intl/Grapheme/bootstrap.php",
-                    "src/Intl/Icu/bootstrap.php",
-                    "src/Intl/Normalizer/bootstrap.php",
-                    "src/Mbstring/bootstrap.php",
-                    "src/Xml/bootstrap.php"
+                    "bootstrap.php"
                 ],
                 "classmap": [
-                    "src/Intl/Normalizer/Resources/stubs",
-                    "src/Php70/Resources/stubs",
-                    "src/Php54/Resources/stubs"
+                    "Resources/stubs"
                 ]
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -1665,37 +2961,37 @@
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony polyfills backporting features to lower PHP versions",
+            "description": "Symfony polyfill backporting some PHP 7.3+ features to lower PHP versions",
             "homepage": "https://symfony.com",
             "keywords": [
-                "compat",
                 "compatibility",
                 "polyfill",
+                "portable",
                 "shim"
             ],
-            "time": "2016-05-18T14:27:53+00:00"
+            "time": "2019-08-06T08:03:45+00:00"
         },
         {
             "name": "symfony/process",
-            "version": "v3.3.5",
+            "version": "v4.4.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/process.git",
-                "reference": "07432804942b9f6dd7b7377faf9920af5f95d70a"
+                "reference": "75ad33d9b6f25325ebc396d68ad86fd74bcfbb06"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/process/zipball/07432804942b9f6dd7b7377faf9920af5f95d70a",
-                "reference": "07432804942b9f6dd7b7377faf9920af5f95d70a",
+                "url": "https://api.github.com/repos/symfony/process/zipball/75ad33d9b6f25325ebc396d68ad86fd74bcfbb06",
+                "reference": "75ad33d9b6f25325ebc396d68ad86fd74bcfbb06",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9"
+                "php": "^7.1.3"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "4.4-dev"
                 }
             },
             "autoload": {
@@ -1722,44 +3018,42 @@
             ],
             "description": "Symfony Process Component",
             "homepage": "https://symfony.com",
-            "time": "2017-07-13T13:05:09+00:00"
+            "time": "2019-10-28T20:30:34+00:00"
         },
         {
             "name": "symfony/routing",
-            "version": "v3.3.5",
+            "version": "v4.4.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/routing.git",
-                "reference": "dc70bbd0ca7b19259f63cdacc8af370bc32a4728"
+                "reference": "cf6d72cf0348775f5243b8389169a7096221ea40"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/routing/zipball/dc70bbd0ca7b19259f63cdacc8af370bc32a4728",
-                "reference": "dc70bbd0ca7b19259f63cdacc8af370bc32a4728",
+                "url": "https://api.github.com/repos/symfony/routing/zipball/cf6d72cf0348775f5243b8389169a7096221ea40",
+                "reference": "cf6d72cf0348775f5243b8389169a7096221ea40",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9"
+                "php": "^7.1.3"
             },
             "conflict": {
-                "symfony/config": "<2.8",
-                "symfony/dependency-injection": "<3.3",
-                "symfony/yaml": "<3.3"
+                "symfony/config": "<4.2",
+                "symfony/dependency-injection": "<3.4",
+                "symfony/yaml": "<3.4"
             },
             "require-dev": {
-                "doctrine/annotations": "~1.0",
-                "doctrine/common": "~2.2",
+                "doctrine/annotations": "~1.2",
                 "psr/log": "~1.0",
-                "symfony/config": "~2.8|~3.0",
-                "symfony/dependency-injection": "~3.3",
-                "symfony/expression-language": "~2.8|~3.0",
-                "symfony/http-foundation": "~2.8|~3.0",
-                "symfony/yaml": "~3.3"
+                "symfony/config": "^4.2|^5.0",
+                "symfony/dependency-injection": "^3.4|^4.0|^5.0",
+                "symfony/expression-language": "^3.4|^4.0|^5.0",
+                "symfony/http-foundation": "^3.4|^4.0|^5.0",
+                "symfony/yaml": "^3.4|^4.0|^5.0"
             },
             "suggest": {
                 "doctrine/annotations": "For using the annotation loader",
                 "symfony/config": "For using the all-in-one router or any loader",
-                "symfony/dependency-injection": "For loading routes from a service",
                 "symfony/expression-language": "For using expression matching",
                 "symfony/http-foundation": "For using a Symfony Request object",
                 "symfony/yaml": "For using the YAML loader"
@@ -1767,7 +3061,7 @@
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "4.4-dev"
                 }
             },
             "autoload": {
@@ -1800,54 +3094,172 @@
                 "uri",
                 "url"
             ],
-            "time": "2017-06-24T09:29:48+00:00"
+            "time": "2019-11-20T13:44:34+00:00"
+        },
+        {
+            "name": "symfony/service-contracts",
+            "version": "v2.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/service-contracts.git",
+                "reference": "9d99e1556417bf227a62e14856d630672bf10eaf"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/service-contracts/zipball/9d99e1556417bf227a62e14856d630672bf10eaf",
+                "reference": "9d99e1556417bf227a62e14856d630672bf10eaf",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2.9",
+                "psr/container": "^1.0"
+            },
+            "suggest": {
+                "symfony/service-implementation": ""
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Contracts\\Service\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Generic abstractions related to writing services",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "abstractions",
+                "contracts",
+                "decoupling",
+                "interfaces",
+                "interoperability",
+                "standards"
+            ],
+            "time": "2019-11-09T09:18:34+00:00"
         },
         {
             "name": "symfony/translation",
-            "version": "v3.3.5",
+            "version": "v4.4.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/translation.git",
-                "reference": "35dd5fb003c90e8bd4d8cabdf94bf9c96d06fdc3"
+                "reference": "897fb68ee7933372517b551d6f08c6d4bb0b8c40"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/translation/zipball/35dd5fb003c90e8bd4d8cabdf94bf9c96d06fdc3",
-                "reference": "35dd5fb003c90e8bd4d8cabdf94bf9c96d06fdc3",
+                "url": "https://api.github.com/repos/symfony/translation/zipball/897fb68ee7933372517b551d6f08c6d4bb0b8c40",
+                "reference": "897fb68ee7933372517b551d6f08c6d4bb0b8c40",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9",
-                "symfony/polyfill-mbstring": "~1.0"
+                "php": "^7.1.3",
+                "symfony/polyfill-mbstring": "~1.0",
+                "symfony/translation-contracts": "^1.1.6|^2"
             },
             "conflict": {
-                "symfony/config": "<2.8",
-                "symfony/yaml": "<3.3"
+                "symfony/config": "<3.4",
+                "symfony/dependency-injection": "<3.4",
+                "symfony/http-kernel": "<4.4",
+                "symfony/yaml": "<3.4"
+            },
+            "provide": {
+                "symfony/translation-implementation": "1.0"
             },
             "require-dev": {
                 "psr/log": "~1.0",
-                "symfony/config": "~2.8|~3.0",
-                "symfony/intl": "^2.8.18|^3.2.5",
-                "symfony/yaml": "~3.3"
+                "symfony/config": "^3.4|^4.0|^5.0",
+                "symfony/console": "^3.4|^4.0|^5.0",
+                "symfony/dependency-injection": "^3.4|^4.0|^5.0",
+                "symfony/finder": "~2.8|~3.0|~4.0|^5.0",
+                "symfony/http-kernel": "^4.4",
+                "symfony/intl": "^3.4|^4.0|^5.0",
+                "symfony/service-contracts": "^1.1.2|^2",
+                "symfony/yaml": "^3.4|^4.0|^5.0"
+            },
+            "suggest": {
+                "psr/log-implementation": "To use logging capability in translator",
+                "symfony/config": "",
+                "symfony/yaml": ""
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.4-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Translation\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony Translation Component",
+            "homepage": "https://symfony.com",
+            "time": "2019-11-12T17:18:47+00:00"
+        },
+        {
+            "name": "symfony/translation-contracts",
+            "version": "v2.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/translation-contracts.git",
+                "reference": "8feb81e6bb1a42d6a3b1429c751d291eb6d05297"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/translation-contracts/zipball/8feb81e6bb1a42d6a3b1429c751d291eb6d05297",
+                "reference": "8feb81e6bb1a42d6a3b1429c751d291eb6d05297",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2.9"
             },
             "suggest": {
-                "psr/log": "To use logging capability in translator",
-                "symfony/config": "",
-                "symfony/yaml": ""
+                "symfony/translation-implementation": ""
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "2.0-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\Translation\\": ""
-                },
-                "exclude-from-classmap": [
-                    "/Tests/"
-                ]
+                    "Symfony\\Contracts\\Translation\\": ""
+                }
             },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
@@ -1855,51 +3267,67 @@
             ],
             "authors": [
                 {
-                    "name": "Fabien Potencier",
-                    "email": "fabien@symfony.com"
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
                 },
                 {
                     "name": "Symfony Community",
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony Translation Component",
+            "description": "Generic abstractions related to translation",
             "homepage": "https://symfony.com",
-            "time": "2017-06-24T16:45:30+00:00"
+            "keywords": [
+                "abstractions",
+                "contracts",
+                "decoupling",
+                "interfaces",
+                "interoperability",
+                "standards"
+            ],
+            "time": "2019-11-09T09:18:34+00:00"
         },
         {
             "name": "symfony/var-dumper",
-            "version": "v3.3.5",
+            "version": "v4.4.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/var-dumper.git",
-                "reference": "0f32b62d21991700250fed5109b092949007c5b3"
+                "reference": "eade2890f8b0eeb279b6cf41b50a10007294490f"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/var-dumper/zipball/0f32b62d21991700250fed5109b092949007c5b3",
-                "reference": "0f32b62d21991700250fed5109b092949007c5b3",
+                "url": "https://api.github.com/repos/symfony/var-dumper/zipball/eade2890f8b0eeb279b6cf41b50a10007294490f",
+                "reference": "eade2890f8b0eeb279b6cf41b50a10007294490f",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9",
-                "symfony/polyfill-mbstring": "~1.0"
+                "php": "^7.1.3",
+                "symfony/polyfill-mbstring": "~1.0",
+                "symfony/polyfill-php72": "~1.5"
             },
             "conflict": {
-                "phpunit/phpunit": "<4.8.35|<5.4.3,>=5.0"
+                "phpunit/phpunit": "<4.8.35|<5.4.3,>=5.0",
+                "symfony/console": "<3.4"
             },
             "require-dev": {
                 "ext-iconv": "*",
-                "twig/twig": "~1.34|~2.4"
+                "symfony/console": "^3.4|^4.0|^5.0",
+                "symfony/process": "^4.4|^5.0",
+                "twig/twig": "^1.34|^2.4|^3.0"
             },
             "suggest": {
                 "ext-iconv": "To convert non-UTF-8 strings to UTF-8 (or symfony/polyfill-iconv in case ext-iconv cannot be used).",
-                "ext-symfony_debug": ""
+                "ext-intl": "To show region name in time zone dump",
+                "symfony/console": "To use the ServerDumpCommand and/or the bin/var-dump-server script"
             },
+            "bin": [
+                "Resources/bin/var-dump-server"
+            ],
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "4.4-dev"
                 }
             },
             "autoload": {
@@ -1933,33 +3361,35 @@
                 "debug",
                 "dump"
             ],
-            "time": "2017-07-10T14:18:27+00:00"
+            "time": "2019-11-12T14:51:11+00:00"
         },
         {
             "name": "tijsverkoyen/css-to-inline-styles",
-            "version": "2.2.0",
+            "version": "2.2.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/tijsverkoyen/CssToInlineStyles.git",
-                "reference": "ab03919dfd85a74ae0372f8baf9f3c7d5c03b04b"
+                "reference": "dda2ee426acd6d801d5b7fd1001cde9b5f790e15"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/tijsverkoyen/CssToInlineStyles/zipball/ab03919dfd85a74ae0372f8baf9f3c7d5c03b04b",
-                "reference": "ab03919dfd85a74ae0372f8baf9f3c7d5c03b04b",
+                "url": "https://api.github.com/repos/tijsverkoyen/CssToInlineStyles/zipball/dda2ee426acd6d801d5b7fd1001cde9b5f790e15",
+                "reference": "dda2ee426acd6d801d5b7fd1001cde9b5f790e15",
                 "shasum": ""
             },
             "require": {
-                "php": "^5.5 || ^7",
-                "symfony/css-selector": "^2.7|~3.0"
+                "ext-dom": "*",
+                "ext-libxml": "*",
+                "php": "^5.5 || ^7.0",
+                "symfony/css-selector": "^2.7 || ^3.0 || ^4.0 || ^5.0"
             },
             "require-dev": {
-                "phpunit/phpunit": "~4.8|5.1.*"
+                "phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "2.0.x-dev"
+                    "dev-master": "2.2.x-dev"
                 }
             },
             "autoload": {
@@ -1980,32 +3410,33 @@
             ],
             "description": "CssToInlineStyles is a class that enables you to convert HTML-pages/files into HTML-pages/files with inline styles. This is very useful when you're sending emails.",
             "homepage": "https://github.com/tijsverkoyen/CssToInlineStyles",
-            "time": "2016-09-20T12:50:39+00:00"
+            "time": "2019-10-24T08:53:34+00:00"
         },
         {
             "name": "vlucas/phpdotenv",
-            "version": "v2.4.0",
+            "version": "v2.6.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/vlucas/phpdotenv.git",
-                "reference": "3cc116adbe4b11be5ec557bf1d24dc5e3a21d18c"
+                "reference": "2a7dcf7e3e02dc5e701004e51a6f304b713107d5"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/vlucas/phpdotenv/zipball/3cc116adbe4b11be5ec557bf1d24dc5e3a21d18c",
-                "reference": "3cc116adbe4b11be5ec557bf1d24dc5e3a21d18c",
+                "url": "https://api.github.com/repos/vlucas/phpdotenv/zipball/2a7dcf7e3e02dc5e701004e51a6f304b713107d5",
+                "reference": "2a7dcf7e3e02dc5e701004e51a6f304b713107d5",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.9"
+                "php": ">=5.3.9",
+                "symfony/polyfill-ctype": "^1.9"
             },
             "require-dev": {
-                "phpunit/phpunit": "^4.8 || ^5.0"
+                "phpunit/phpunit": "^4.8.35 || ^5.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "2.4-dev"
+                    "dev-master": "2.6-dev"
                 }
             },
             "autoload": {
@@ -2015,7 +3446,7 @@
             },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
-                "BSD-3-Clause-Attribution"
+                "BSD-3-Clause"
             ],
             "authors": [
                 {
@@ -2030,105 +3461,36 @@
                 "env",
                 "environment"
             ],
-            "time": "2016-09-01T10:05:43+00:00"
-        },
-        {
-            "name": "voku/portable-utf8",
-            "version": "2.1.24",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/voku/portable-utf8.git",
-                "reference": "17c394be13374b196d4691c54c5f3ffccca253cf"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/voku/portable-utf8/zipball/17c394be13374b196d4691c54c5f3ffccca253cf",
-                "reference": "17c394be13374b196d4691c54c5f3ffccca253cf",
-                "shasum": ""
-            },
-            "require": {
-                "php": ">=5.3.0",
-                "symfony/polyfill": "1.2.*@dev"
-            },
-            "require-dev": {
-                "phpunit/phpunit": "~4.0"
-            },
-            "suggest": {
-                "ext-iconv": "Use iconv for best performance",
-                "ext-intl": "Use Intl for best performance",
-                "ext-mbstring": "Use Mbstring for best performance"
-            },
-            "type": "library",
-            "extra": {
-                "branch-alias": {
-                    "dev-master": "2.1.x-dev"
-                }
-            },
-            "autoload": {
-                "psr-4": {
-                    "voku\\": "src/voku/"
-                },
-                "files": [
-                    "bootstrap.php"
-                ]
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "(Apache-2.0 or GPL-2.0)"
-            ],
-            "authors": [
-                {
-                    "name": "Hamid Sarfraz",
-                    "homepage": "http://pageconfig.com/"
-                },
-                {
-                    "name": "Lars Moelleken",
-                    "homepage": "http://www.moelleken.org/"
-                },
-                {
-                    "name": "Nicolas Grekas",
-                    "email": "p@tchwork.com"
-                }
-            ],
-            "description": "Portable UTF-8 library with polyfill / shim for Iconv, Intl, Mbstring, Normalizrer etc.",
-            "homepage": "https://github.com/voku/portable-utf8",
-            "keywords": [
-                "UTF",
-                "clean",
-                "php",
-                "unicode",
-                "utf-8",
-                "utf8"
-            ],
-            "time": "2016-06-29T23:42:06+00:00"
+            "time": "2019-01-29T11:11:52+00:00"
         },
         {
             "name": "voku/simple_html_dom",
-            "version": "1.7.2",
+            "version": "4.7.7",
             "source": {
                 "type": "git",
                 "url": "https://github.com/voku/simple_html_dom.git",
-                "reference": "766171ff0f21a087d08d8de7df7bbf859a4fdd9b"
+                "reference": "9c288284e59672715a06e3a36199f8c53bbda505"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/voku/simple_html_dom/zipball/766171ff0f21a087d08d8de7df7bbf859a4fdd9b",
-                "reference": "766171ff0f21a087d08d8de7df7bbf859a4fdd9b",
+                "url": "https://api.github.com/repos/voku/simple_html_dom/zipball/9c288284e59672715a06e3a36199f8c53bbda505",
+                "reference": "9c288284e59672715a06e3a36199f8c53bbda505",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.2",
-                "voku/portable-utf8": "~2.0"
+                "ext-dom": "*",
+                "ext-libxml": "*",
+                "ext-simplexml": "*",
+                "php": ">=7.0.0",
+                "symfony/css-selector": "~3.0 || ~4.0"
             },
             "require-dev": {
-                "phpunit/phpunit": "4.*"
+                "phpunit/phpunit": "~6.0 || ~7.0"
             },
-            "type": "library",
-            "extra": {
-                "branch-alias": {
-                    "dev-master": "1.0.x-dev"
-                }
+            "suggest": {
+                "voku/portable-utf8": "~4.0"
             },
+            "type": "library",
             "autoload": {
                 "psr-4": {
                     "voku\\helper\\": "src/voku/helper/"
@@ -2140,9 +3502,10 @@
             ],
             "authors": [
                 {
-                    "name": "S.C. Chen",
-                    "email": "me578022@gmail.com",
-                    "homepage": "http://simplehtmldom.sourceforge.net/"
+                    "name": "dimabdc",
+                    "email": "support@titor.ru",
+                    "homepage": "http://github.com/dimabdc",
+                    "role": "Developer"
                 },
                 {
                     "name": "Lars Moelleken",
@@ -2153,121 +3516,116 @@
             "description": "Simple HTML DOM package.",
             "homepage": "http://simplehtmldom.sourceforge.net/",
             "keywords": [
+                "HTML Parser",
                 "dom",
                 "php dom"
             ],
-            "time": "2016-01-19T08:27:48+00:00"
-        }
-    ],
-    "packages-dev": [
+            "time": "2019-11-09T14:36:52+00:00"
+        },
         {
-            "name": "barryvdh/laravel-ide-helper",
-            "version": "v2.4.1",
+            "name": "zendframework/zend-diactoros",
+            "version": "2.2.1",
             "source": {
                 "type": "git",
-                "url": "https://github.com/barryvdh/laravel-ide-helper.git",
-                "reference": "2b1273c45e2f8df7a625563e2283a17c14f02ae8"
+                "url": "https://github.com/zendframework/zend-diactoros.git",
+                "reference": "de5847b068362a88684a55b0dbb40d85986cfa52"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/barryvdh/laravel-ide-helper/zipball/2b1273c45e2f8df7a625563e2283a17c14f02ae8",
-                "reference": "2b1273c45e2f8df7a625563e2283a17c14f02ae8",
+                "url": "https://api.github.com/repos/zendframework/zend-diactoros/zipball/de5847b068362a88684a55b0dbb40d85986cfa52",
+                "reference": "de5847b068362a88684a55b0dbb40d85986cfa52",
                 "shasum": ""
             },
             "require": {
-                "barryvdh/reflection-docblock": "^2.0.4",
-                "illuminate/console": "^5.0,<5.6",
-                "illuminate/filesystem": "^5.0,<5.6",
-                "illuminate/support": "^5.0,<5.6",
-                "php": ">=5.4.0",
-                "symfony/class-loader": "^2.3|^3.0"
+                "php": "^7.1",
+                "psr/http-factory": "^1.0",
+                "psr/http-message": "^1.0"
             },
-            "require-dev": {
-                "doctrine/dbal": "~2.3",
-                "illuminate/config": "^5.0,<5.6",
-                "illuminate/view": "^5.0,<5.6",
-                "phpunit/phpunit": "4.*",
-                "scrutinizer/ocular": "~1.1",
-                "squizlabs/php_codesniffer": "~2.3"
+            "provide": {
+                "psr/http-factory-implementation": "1.0",
+                "psr/http-message-implementation": "1.0"
             },
-            "suggest": {
-                "doctrine/dbal": "Load information from the database about models for phpdocs (~2.3)"
+            "require-dev": {
+                "ext-curl": "*",
+                "ext-dom": "*",
+                "ext-libxml": "*",
+                "http-interop/http-factory-tests": "^0.5.0",
+                "php-http/psr7-integration-tests": "dev-master",
+                "phpunit/phpunit": "^7.0.2",
+                "zendframework/zend-coding-standard": "~1.0.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "2.3-dev"
-                },
-                "laravel": {
-                    "providers": [
-                        "Barryvdh\\LaravelIdeHelper\\IdeHelperServiceProvider"
-                    ]
+                    "dev-master": "2.1.x-dev",
+                    "dev-develop": "2.2.x-dev",
+                    "dev-release-1.8": "1.8.x-dev"
                 }
             },
             "autoload": {
+                "files": [
+                    "src/functions/create_uploaded_file.php",
+                    "src/functions/marshal_headers_from_sapi.php",
+                    "src/functions/marshal_method_from_sapi.php",
+                    "src/functions/marshal_protocol_version_from_sapi.php",
+                    "src/functions/marshal_uri_from_sapi.php",
+                    "src/functions/normalize_server.php",
+                    "src/functions/normalize_uploaded_files.php",
+                    "src/functions/parse_cookie_header.php"
+                ],
                 "psr-4": {
-                    "Barryvdh\\LaravelIdeHelper\\": "src"
+                    "Zend\\Diactoros\\": "src/"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
-                "MIT"
-            ],
-            "authors": [
-                {
-                    "name": "Barry vd. Heuvel",
-                    "email": "barryvdh@gmail.com"
-                }
+                "BSD-3-Clause"
             ],
-            "description": "Laravel IDE Helper, generates correct PHPDocs for all Facade classes, to improve auto-completion.",
+            "description": "PSR HTTP Message implementations",
             "keywords": [
-                "autocomplete",
-                "codeintel",
-                "helper",
-                "ide",
-                "laravel",
-                "netbeans",
-                "phpdoc",
-                "phpstorm",
-                "sublime"
+                "http",
+                "psr",
+                "psr-7"
             ],
-            "time": "2017-07-16T00:24:12+00:00"
-        },
+            "time": "2019-11-13T19:16:13+00:00"
+        }
+    ],
+    "packages-dev": [
         {
-            "name": "barryvdh/reflection-docblock",
-            "version": "v2.0.4",
+            "name": "doctrine/instantiator",
+            "version": "1.3.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/barryvdh/ReflectionDocBlock.git",
-                "reference": "3dcbd98b5d9384a5357266efba8fd29884458e5c"
+                "url": "https://github.com/doctrine/instantiator.git",
+                "reference": "ae466f726242e637cebdd526a7d991b9433bacf1"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/barryvdh/ReflectionDocBlock/zipball/3dcbd98b5d9384a5357266efba8fd29884458e5c",
-                "reference": "3dcbd98b5d9384a5357266efba8fd29884458e5c",
+                "url": "https://api.github.com/repos/doctrine/instantiator/zipball/ae466f726242e637cebdd526a7d991b9433bacf1",
+                "reference": "ae466f726242e637cebdd526a7d991b9433bacf1",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.3"
+                "php": "^7.1"
             },
             "require-dev": {
-                "phpunit/phpunit": "~4.0,<4.5"
-            },
-            "suggest": {
-                "dflydev/markdown": "~1.0",
-                "erusev/parsedown": "~1.0"
+                "doctrine/coding-standard": "^6.0",
+                "ext-pdo": "*",
+                "ext-phar": "*",
+                "phpbench/phpbench": "^0.13",
+                "phpstan/phpstan-phpunit": "^0.11",
+                "phpstan/phpstan-shim": "^0.11",
+                "phpunit/phpunit": "^7.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "2.0.x-dev"
+                    "dev-master": "1.2.x-dev"
                 }
             },
             "autoload": {
-                "psr-0": {
-                    "Barryvdh": [
-                        "src/"
-                    ]
+                "psr-4": {
+                    "Doctrine\\Instantiator\\": "src/Doctrine/Instantiator/"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -2276,45 +3634,55 @@
             ],
             "authors": [
                 {
-                    "name": "Mike van Riel",
-                    "email": "mike.vanriel@naenius.com"
+                    "name": "Marco Pivetta",
+                    "email": "ocramius@gmail.com",
+                    "homepage": "http://ocramius.github.com/"
                 }
             ],
-            "time": "2016-06-13T19:28:20+00:00"
+            "description": "A small, lightweight utility to instantiate objects in PHP without invoking their constructors",
+            "homepage": "https://www.doctrine-project.org/projects/instantiator.html",
+            "keywords": [
+                "constructor",
+                "instantiate"
+            ],
+            "time": "2019-10-21T16:45:58+00:00"
         },
         {
-            "name": "doctrine/instantiator",
-            "version": "1.1.0",
+            "name": "filp/whoops",
+            "version": "2.5.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/doctrine/instantiator.git",
-                "reference": "185b8868aa9bf7159f5f953ed5afb2d7fcdc3bda"
+                "url": "https://github.com/filp/whoops.git",
+                "reference": "cde50e6720a39fdacb240159d3eea6865d51fd96"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/doctrine/instantiator/zipball/185b8868aa9bf7159f5f953ed5afb2d7fcdc3bda",
-                "reference": "185b8868aa9bf7159f5f953ed5afb2d7fcdc3bda",
+                "url": "https://api.github.com/repos/filp/whoops/zipball/cde50e6720a39fdacb240159d3eea6865d51fd96",
+                "reference": "cde50e6720a39fdacb240159d3eea6865d51fd96",
                 "shasum": ""
             },
             "require": {
-                "php": "^7.1"
+                "php": "^5.5.9 || ^7.0",
+                "psr/log": "^1.0.1"
             },
             "require-dev": {
-                "athletic/athletic": "~0.1.8",
-                "ext-pdo": "*",
-                "ext-phar": "*",
-                "phpunit/phpunit": "^6.2.3",
-                "squizlabs/php_codesniffer": "^3.0.2"
+                "mockery/mockery": "^0.9 || ^1.0",
+                "phpunit/phpunit": "^4.8.35 || ^5.7",
+                "symfony/var-dumper": "^2.6 || ^3.0 || ^4.0"
+            },
+            "suggest": {
+                "symfony/var-dumper": "Pretty print complex values better with var-dumper available",
+                "whoops/soap": "Formats errors as SOAP responses"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.2.x-dev"
+                    "dev-master": "2.2-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Doctrine\\Instantiator\\": "src/Doctrine/Instantiator/"
+                    "Whoops\\": "src/Whoops/"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -2323,40 +3691,44 @@
             ],
             "authors": [
                 {
-                    "name": "Marco Pivetta",
-                    "email": "ocramius@gmail.com",
-                    "homepage": "http://ocramius.github.com/"
+                    "name": "Filipe Dobreira",
+                    "role": "Developer",
+                    "homepage": "https://github.com/filp"
                 }
             ],
-            "description": "A small, lightweight utility to instantiate objects in PHP without invoking their constructors",
-            "homepage": "https://github.com/doctrine/instantiator",
+            "description": "php error handling for cool kids",
+            "homepage": "https://filp.github.io/whoops/",
             "keywords": [
-                "constructor",
-                "instantiate"
+                "error",
+                "exception",
+                "handling",
+                "library",
+                "throwable",
+                "whoops"
             ],
-            "time": "2017-07-22T11:58:36+00:00"
+            "time": "2019-08-07T09:00:00+00:00"
         },
         {
             "name": "fzaninotto/faker",
-            "version": "v1.6.0",
+            "version": "v1.9.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/fzaninotto/Faker.git",
-                "reference": "44f9a286a04b80c76a4e5fb7aad8bb539b920123"
+                "reference": "27a216cbe72327b2d6369fab721a5843be71e57d"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/fzaninotto/Faker/zipball/44f9a286a04b80c76a4e5fb7aad8bb539b920123",
-                "reference": "44f9a286a04b80c76a4e5fb7aad8bb539b920123",
+                "url": "https://api.github.com/repos/fzaninotto/Faker/zipball/27a216cbe72327b2d6369fab721a5843be71e57d",
+                "reference": "27a216cbe72327b2d6369fab721a5843be71e57d",
                 "shasum": ""
             },
             "require": {
-                "php": "^5.3.3|^7.0"
+                "php": "^5.3.3 || ^7.0"
             },
             "require-dev": {
                 "ext-intl": "*",
-                "phpunit/phpunit": "~4.0",
-                "squizlabs/php_codesniffer": "~1.5"
+                "phpunit/phpunit": "^4.8.35 || ^5.7",
+                "squizlabs/php_codesniffer": "^2.9.2"
             },
             "type": "library",
             "extra": {
@@ -2382,7 +3754,7 @@
                 "faker",
                 "fixtures"
             ],
-            "time": "2016-04-29T12:21:54+00:00"
+            "time": "2019-11-14T13:13:06+00:00"
         },
         {
             "name": "hamcrest/hamcrest-php",
@@ -2431,16 +3803,16 @@
         },
         {
             "name": "mockery/mockery",
-            "version": "0.9.9",
+            "version": "0.9.11",
             "source": {
                 "type": "git",
                 "url": "https://github.com/mockery/mockery.git",
-                "reference": "6fdb61243844dc924071d3404bb23994ea0b6856"
+                "reference": "be9bf28d8e57d67883cba9fcadfcff8caab667f8"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/mockery/mockery/zipball/6fdb61243844dc924071d3404bb23994ea0b6856",
-                "reference": "6fdb61243844dc924071d3404bb23994ea0b6856",
+                "url": "https://api.github.com/repos/mockery/mockery/zipball/be9bf28d8e57d67883cba9fcadfcff8caab667f8",
+                "reference": "be9bf28d8e57d67883cba9fcadfcff8caab667f8",
                 "shasum": ""
             },
             "require": {
@@ -2468,7 +3840,7 @@
             ],
             "authors": [
                 {
-                    "name": "Padraic Brady",
+                    "name": "Pádraic Brady",
                     "email": "padraic.brady@gmail.com",
                     "homepage": "http://blog.astrumfutura.com"
                 },
@@ -2492,81 +3864,187 @@
                 "test double",
                 "testing"
             ],
-            "time": "2017-02-28T12:52:32+00:00"
+            "time": "2019-02-12T16:07:13+00:00"
         },
         {
             "name": "myclabs/deep-copy",
-            "version": "1.6.1",
+            "version": "1.9.3",
             "source": {
                 "type": "git",
                 "url": "https://github.com/myclabs/DeepCopy.git",
-                "reference": "8e6e04167378abf1ddb4d3522d8755c5fd90d102"
+                "reference": "007c053ae6f31bba39dfa19a7726f56e9763bbea"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/myclabs/DeepCopy/zipball/8e6e04167378abf1ddb4d3522d8755c5fd90d102",
-                "reference": "8e6e04167378abf1ddb4d3522d8755c5fd90d102",
+                "url": "https://api.github.com/repos/myclabs/DeepCopy/zipball/007c053ae6f31bba39dfa19a7726f56e9763bbea",
+                "reference": "007c053ae6f31bba39dfa19a7726f56e9763bbea",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.4.0"
+                "php": "^7.1"
+            },
+            "replace": {
+                "myclabs/deep-copy": "self.version"
             },
             "require-dev": {
-                "doctrine/collections": "1.*",
-                "phpunit/phpunit": "~4.1"
+                "doctrine/collections": "^1.0",
+                "doctrine/common": "^2.6",
+                "phpunit/phpunit": "^7.1"
             },
             "type": "library",
             "autoload": {
                 "psr-4": {
                     "DeepCopy\\": "src/DeepCopy/"
+                },
+                "files": [
+                    "src/DeepCopy/deep_copy.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "Create deep copies (clones) of your objects",
+            "keywords": [
+                "clone",
+                "copy",
+                "duplicate",
+                "object",
+                "object graph"
+            ],
+            "time": "2019-08-09T12:45:53+00:00"
+        },
+        {
+            "name": "phar-io/manifest",
+            "version": "1.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phar-io/manifest.git",
+                "reference": "7761fcacf03b4d4f16e7ccb606d4879ca431fcf4"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phar-io/manifest/zipball/7761fcacf03b4d4f16e7ccb606d4879ca431fcf4",
+                "reference": "7761fcacf03b4d4f16e7ccb606d4879ca431fcf4",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-phar": "*",
+                "phar-io/version": "^2.0",
+                "php": "^5.6 || ^7.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0.x-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Heuer",
+                    "email": "sebastian@phpeople.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Component for reading phar.io manifest information from a PHP Archive (PHAR)",
+            "time": "2018-07-08T19:23:20+00:00"
+        },
+        {
+            "name": "phar-io/version",
+            "version": "2.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phar-io/version.git",
+                "reference": "45a2ec53a73c70ce41d55cedef9063630abaf1b6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phar-io/version/zipball/45a2ec53a73c70ce41d55cedef9063630abaf1b6",
+                "reference": "45a2ec53a73c70ce41d55cedef9063630abaf1b6",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^5.6 || ^7.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Heuer",
+                    "email": "sebastian@phpeople.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "Developer"
                 }
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "MIT"
-            ],
-            "description": "Create deep copies (clones) of your objects",
-            "homepage": "https://github.com/myclabs/DeepCopy",
-            "keywords": [
-                "clone",
-                "copy",
-                "duplicate",
-                "object",
-                "object graph"
             ],
-            "time": "2017-04-12T18:52:22+00:00"
+            "description": "Library for handling version information and constraints",
+            "time": "2018-07-08T19:19:57+00:00"
         },
         {
             "name": "phpdocumentor/reflection-common",
-            "version": "1.0",
+            "version": "2.0.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpDocumentor/ReflectionCommon.git",
-                "reference": "144c307535e82c8fdcaacbcfc1d6d8eeb896687c"
+                "reference": "63a995caa1ca9e5590304cd845c15ad6d482a62a"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpDocumentor/ReflectionCommon/zipball/144c307535e82c8fdcaacbcfc1d6d8eeb896687c",
-                "reference": "144c307535e82c8fdcaacbcfc1d6d8eeb896687c",
+                "url": "https://api.github.com/repos/phpDocumentor/ReflectionCommon/zipball/63a995caa1ca9e5590304cd845c15ad6d482a62a",
+                "reference": "63a995caa1ca9e5590304cd845c15ad6d482a62a",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5"
+                "php": ">=7.1"
             },
             "require-dev": {
-                "phpunit/phpunit": "^4.6"
+                "phpunit/phpunit": "~6"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.0.x-dev"
+                    "dev-master": "2.x-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "phpDocumentor\\Reflection\\": [
-                        "src"
-                    ]
+                    "phpDocumentor\\Reflection\\": "src/"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -2588,33 +4066,39 @@
                 "reflection",
                 "static analysis"
             ],
-            "time": "2015-12-27T11:43:31+00:00"
+            "time": "2018-08-07T13:53:10+00:00"
         },
         {
             "name": "phpdocumentor/reflection-docblock",
-            "version": "3.2.0",
+            "version": "4.3.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpDocumentor/ReflectionDocBlock.git",
-                "reference": "46f7e8bb075036c92695b15a1ddb6971c751e585"
+                "reference": "b83ff7cfcfee7827e1e78b637a5904fe6a96698e"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpDocumentor/ReflectionDocBlock/zipball/46f7e8bb075036c92695b15a1ddb6971c751e585",
-                "reference": "46f7e8bb075036c92695b15a1ddb6971c751e585",
+                "url": "https://api.github.com/repos/phpDocumentor/ReflectionDocBlock/zipball/b83ff7cfcfee7827e1e78b637a5904fe6a96698e",
+                "reference": "b83ff7cfcfee7827e1e78b637a5904fe6a96698e",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5",
-                "phpdocumentor/reflection-common": "^1.0@dev",
-                "phpdocumentor/type-resolver": "^0.4.0",
+                "php": "^7.0",
+                "phpdocumentor/reflection-common": "^1.0.0 || ^2.0.0",
+                "phpdocumentor/type-resolver": "~0.4 || ^1.0.0",
                 "webmozart/assert": "^1.0"
             },
             "require-dev": {
-                "mockery/mockery": "^0.9.4",
-                "phpunit/phpunit": "^4.4"
+                "doctrine/instantiator": "^1.0.5",
+                "mockery/mockery": "^1.0",
+                "phpunit/phpunit": "^6.4"
             },
             "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.x-dev"
+                }
+            },
             "autoload": {
                 "psr-4": {
                     "phpDocumentor\\Reflection\\": [
@@ -2633,41 +4117,40 @@
                 }
             ],
             "description": "With this component, a library can provide support for annotations via DocBlocks or otherwise retrieve information that is embedded in a DocBlock.",
-            "time": "2017-07-15T11:38:20+00:00"
+            "time": "2019-09-12T14:27:41+00:00"
         },
         {
             "name": "phpdocumentor/type-resolver",
-            "version": "0.4.0",
+            "version": "1.0.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpDocumentor/TypeResolver.git",
-                "reference": "9c977708995954784726e25d0cd1dddf4e65b0f7"
+                "reference": "2e32a6d48972b2c1976ed5d8967145b6cec4a4a9"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpDocumentor/TypeResolver/zipball/9c977708995954784726e25d0cd1dddf4e65b0f7",
-                "reference": "9c977708995954784726e25d0cd1dddf4e65b0f7",
+                "url": "https://api.github.com/repos/phpDocumentor/TypeResolver/zipball/2e32a6d48972b2c1976ed5d8967145b6cec4a4a9",
+                "reference": "2e32a6d48972b2c1976ed5d8967145b6cec4a4a9",
                 "shasum": ""
             },
             "require": {
-                "php": "^5.5 || ^7.0",
-                "phpdocumentor/reflection-common": "^1.0"
+                "php": "^7.1",
+                "phpdocumentor/reflection-common": "^2.0"
             },
             "require-dev": {
-                "mockery/mockery": "^0.9.4",
-                "phpunit/phpunit": "^5.2||^4.8.24"
+                "ext-tokenizer": "^7.1",
+                "mockery/mockery": "~1",
+                "phpunit/phpunit": "^7.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.0.x-dev"
+                    "dev-master": "1.x-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "phpDocumentor\\Reflection\\": [
-                        "src/"
-                    ]
+                    "phpDocumentor\\Reflection\\": "src"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -2680,42 +4163,43 @@
                     "email": "me@mikevanriel.com"
                 }
             ],
-            "time": "2017-07-14T14:27:02+00:00"
+            "description": "A PSR-5 based resolver of Class names, Types and Structural Element Names",
+            "time": "2019-08-22T18:11:29+00:00"
         },
         {
             "name": "phpspec/prophecy",
-            "version": "v1.7.0",
+            "version": "1.9.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpspec/prophecy.git",
-                "reference": "93d39f1f7f9326d746203c7c056f300f7f126073"
+                "reference": "f6811d96d97bdf400077a0cc100ae56aa32b9203"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpspec/prophecy/zipball/93d39f1f7f9326d746203c7c056f300f7f126073",
-                "reference": "93d39f1f7f9326d746203c7c056f300f7f126073",
+                "url": "https://api.github.com/repos/phpspec/prophecy/zipball/f6811d96d97bdf400077a0cc100ae56aa32b9203",
+                "reference": "f6811d96d97bdf400077a0cc100ae56aa32b9203",
                 "shasum": ""
             },
             "require": {
                 "doctrine/instantiator": "^1.0.2",
                 "php": "^5.3|^7.0",
-                "phpdocumentor/reflection-docblock": "^2.0|^3.0.2",
-                "sebastian/comparator": "^1.1|^2.0",
+                "phpdocumentor/reflection-docblock": "^2.0|^3.0.2|^4.0|^5.0",
+                "sebastian/comparator": "^1.1|^2.0|^3.0",
                 "sebastian/recursion-context": "^1.0|^2.0|^3.0"
             },
             "require-dev": {
                 "phpspec/phpspec": "^2.5|^3.2",
-                "phpunit/phpunit": "^4.8 || ^5.6.5"
+                "phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.5 || ^7.1"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.6.x-dev"
+                    "dev-master": "1.8.x-dev"
                 }
             },
             "autoload": {
-                "psr-0": {
-                    "Prophecy\\": "src/"
+                "psr-4": {
+                    "Prophecy\\": "src/Prophecy"
                 }
             },
             "notification-url": "https://packagist.org/downloads/",
@@ -2743,44 +4227,44 @@
                 "spy",
                 "stub"
             ],
-            "time": "2017-03-02T20:05:34+00:00"
+            "time": "2019-10-03T11:07:50+00:00"
         },
         {
             "name": "phpunit/php-code-coverage",
-            "version": "4.0.8",
+            "version": "6.1.4",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/php-code-coverage.git",
-                "reference": "ef7b2f56815df854e66ceaee8ebe9393ae36a40d"
+                "reference": "807e6013b00af69b6c5d9ceb4282d0393dbb9d8d"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/php-code-coverage/zipball/ef7b2f56815df854e66ceaee8ebe9393ae36a40d",
-                "reference": "ef7b2f56815df854e66ceaee8ebe9393ae36a40d",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-code-coverage/zipball/807e6013b00af69b6c5d9ceb4282d0393dbb9d8d",
+                "reference": "807e6013b00af69b6c5d9ceb4282d0393dbb9d8d",
                 "shasum": ""
             },
             "require": {
                 "ext-dom": "*",
                 "ext-xmlwriter": "*",
-                "php": "^5.6 || ^7.0",
-                "phpunit/php-file-iterator": "^1.3",
-                "phpunit/php-text-template": "^1.2",
-                "phpunit/php-token-stream": "^1.4.2 || ^2.0",
-                "sebastian/code-unit-reverse-lookup": "^1.0",
-                "sebastian/environment": "^1.3.2 || ^2.0",
-                "sebastian/version": "^1.0 || ^2.0"
+                "php": "^7.1",
+                "phpunit/php-file-iterator": "^2.0",
+                "phpunit/php-text-template": "^1.2.1",
+                "phpunit/php-token-stream": "^3.0",
+                "sebastian/code-unit-reverse-lookup": "^1.0.1",
+                "sebastian/environment": "^3.1 || ^4.0",
+                "sebastian/version": "^2.0.1",
+                "theseer/tokenizer": "^1.1"
             },
             "require-dev": {
-                "ext-xdebug": "^2.1.4",
-                "phpunit/phpunit": "^5.7"
+                "phpunit/phpunit": "^7.0"
             },
             "suggest": {
-                "ext-xdebug": "^2.5.1"
+                "ext-xdebug": "^2.6.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "4.0.x-dev"
+                    "dev-master": "6.1-dev"
                 }
             },
             "autoload": {
@@ -2795,7 +4279,7 @@
             "authors": [
                 {
                     "name": "Sebastian Bergmann",
-                    "email": "sb@sebastian-bergmann.de",
+                    "email": "sebastian@phpunit.de",
                     "role": "lead"
                 }
             ],
@@ -2806,29 +4290,32 @@
                 "testing",
                 "xunit"
             ],
-            "time": "2017-04-02T07:44:40+00:00"
+            "time": "2018-10-31T16:06:48+00:00"
         },
         {
             "name": "phpunit/php-file-iterator",
-            "version": "1.4.2",
+            "version": "2.0.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/php-file-iterator.git",
-                "reference": "3cc8f69b3028d0f96a9078e6295d86e9bf019be5"
+                "reference": "050bedf145a257b1ff02746c31894800e5122946"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/php-file-iterator/zipball/3cc8f69b3028d0f96a9078e6295d86e9bf019be5",
-                "reference": "3cc8f69b3028d0f96a9078e6295d86e9bf019be5",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-file-iterator/zipball/050bedf145a257b1ff02746c31894800e5122946",
+                "reference": "050bedf145a257b1ff02746c31894800e5122946",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.3"
+                "php": "^7.1"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^7.1"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.4.x-dev"
+                    "dev-master": "2.0.x-dev"
                 }
             },
             "autoload": {
@@ -2843,7 +4330,7 @@
             "authors": [
                 {
                     "name": "Sebastian Bergmann",
-                    "email": "sb@sebastian-bergmann.de",
+                    "email": "sebastian@phpunit.de",
                     "role": "lead"
                 }
             ],
@@ -2853,7 +4340,7 @@
                 "filesystem",
                 "iterator"
             ],
-            "time": "2016-10-03T07:40:28+00:00"
+            "time": "2018-09-13T20:33:42+00:00"
         },
         {
             "name": "phpunit/php-text-template",
@@ -2898,28 +4385,28 @@
         },
         {
             "name": "phpunit/php-timer",
-            "version": "1.0.9",
+            "version": "2.1.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/php-timer.git",
-                "reference": "3dcf38ca72b158baf0bc245e9184d3fdffa9c46f"
+                "reference": "1038454804406b0b5f5f520358e78c1c2f71501e"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/php-timer/zipball/3dcf38ca72b158baf0bc245e9184d3fdffa9c46f",
-                "reference": "3dcf38ca72b158baf0bc245e9184d3fdffa9c46f",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-timer/zipball/1038454804406b0b5f5f520358e78c1c2f71501e",
+                "reference": "1038454804406b0b5f5f520358e78c1c2f71501e",
                 "shasum": ""
             },
             "require": {
-                "php": "^5.3.3 || ^7.0"
+                "php": "^7.1"
             },
             "require-dev": {
-                "phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.0"
+                "phpunit/phpunit": "^7.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.0-dev"
+                    "dev-master": "2.1-dev"
                 }
             },
             "autoload": {
@@ -2934,7 +4421,7 @@
             "authors": [
                 {
                     "name": "Sebastian Bergmann",
-                    "email": "sb@sebastian-bergmann.de",
+                    "email": "sebastian@phpunit.de",
                     "role": "lead"
                 }
             ],
@@ -2943,33 +4430,33 @@
             "keywords": [
                 "timer"
             ],
-            "time": "2017-02-26T11:10:40+00:00"
+            "time": "2019-06-07T04:22:29+00:00"
         },
         {
             "name": "phpunit/php-token-stream",
-            "version": "1.4.11",
+            "version": "3.1.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/php-token-stream.git",
-                "reference": "e03f8f67534427a787e21a385a67ec3ca6978ea7"
+                "reference": "995192df77f63a59e47f025390d2d1fdf8f425ff"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/php-token-stream/zipball/e03f8f67534427a787e21a385a67ec3ca6978ea7",
-                "reference": "e03f8f67534427a787e21a385a67ec3ca6978ea7",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-token-stream/zipball/995192df77f63a59e47f025390d2d1fdf8f425ff",
+                "reference": "995192df77f63a59e47f025390d2d1fdf8f425ff",
                 "shasum": ""
             },
             "require": {
                 "ext-tokenizer": "*",
-                "php": ">=5.3.3"
+                "php": "^7.1"
             },
             "require-dev": {
-                "phpunit/phpunit": "~4.2"
+                "phpunit/phpunit": "^7.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.4-dev"
+                    "dev-master": "3.1-dev"
                 }
             },
             "autoload": {
@@ -2992,55 +4479,57 @@
             "keywords": [
                 "tokenizer"
             ],
-            "time": "2017-02-27T10:12:30+00:00"
+            "time": "2019-09-17T06:23:10+00:00"
         },
         {
             "name": "phpunit/phpunit",
-            "version": "5.7.21",
+            "version": "7.5.17",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/phpunit.git",
-                "reference": "3b91adfb64264ddec5a2dee9851f354aa66327db"
+                "reference": "4c92a15296e58191a4cd74cff3b34fc8e374174a"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/3b91adfb64264ddec5a2dee9851f354aa66327db",
-                "reference": "3b91adfb64264ddec5a2dee9851f354aa66327db",
+                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/4c92a15296e58191a4cd74cff3b34fc8e374174a",
+                "reference": "4c92a15296e58191a4cd74cff3b34fc8e374174a",
                 "shasum": ""
             },
             "require": {
+                "doctrine/instantiator": "^1.1",
                 "ext-dom": "*",
                 "ext-json": "*",
                 "ext-libxml": "*",
                 "ext-mbstring": "*",
                 "ext-xml": "*",
-                "myclabs/deep-copy": "~1.3",
-                "php": "^5.6 || ^7.0",
-                "phpspec/prophecy": "^1.6.2",
-                "phpunit/php-code-coverage": "^4.0.4",
-                "phpunit/php-file-iterator": "~1.4",
-                "phpunit/php-text-template": "~1.2",
-                "phpunit/php-timer": "^1.0.6",
-                "phpunit/phpunit-mock-objects": "^3.2",
-                "sebastian/comparator": "^1.2.4",
-                "sebastian/diff": "^1.4.3",
-                "sebastian/environment": "^1.3.4 || ^2.0",
-                "sebastian/exporter": "~2.0",
-                "sebastian/global-state": "^1.1",
-                "sebastian/object-enumerator": "~2.0",
-                "sebastian/resource-operations": "~1.0",
-                "sebastian/version": "~1.0.3|~2.0",
-                "symfony/yaml": "~2.1|~3.0"
+                "myclabs/deep-copy": "^1.7",
+                "phar-io/manifest": "^1.0.2",
+                "phar-io/version": "^2.0",
+                "php": "^7.1",
+                "phpspec/prophecy": "^1.7",
+                "phpunit/php-code-coverage": "^6.0.7",
+                "phpunit/php-file-iterator": "^2.0.1",
+                "phpunit/php-text-template": "^1.2.1",
+                "phpunit/php-timer": "^2.1",
+                "sebastian/comparator": "^3.0",
+                "sebastian/diff": "^3.0",
+                "sebastian/environment": "^4.0",
+                "sebastian/exporter": "^3.1",
+                "sebastian/global-state": "^2.0",
+                "sebastian/object-enumerator": "^3.0.3",
+                "sebastian/resource-operations": "^2.0",
+                "sebastian/version": "^2.0.1"
             },
             "conflict": {
-                "phpdocumentor/reflection-docblock": "3.0.2"
+                "phpunit/phpunit-mock-objects": "*"
             },
             "require-dev": {
                 "ext-pdo": "*"
             },
             "suggest": {
+                "ext-soap": "*",
                 "ext-xdebug": "*",
-                "phpunit/php-invoker": "~1.1"
+                "phpunit/php-invoker": "^2.0"
             },
             "bin": [
                 "phpunit"
@@ -3048,7 +4537,7 @@
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "5.7.x-dev"
+                    "dev-master": "7.5-dev"
                 }
             },
             "autoload": {
@@ -3074,66 +4563,7 @@
                 "testing",
                 "xunit"
             ],
-            "time": "2017-06-21T08:11:54+00:00"
-        },
-        {
-            "name": "phpunit/phpunit-mock-objects",
-            "version": "3.4.4",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/sebastianbergmann/phpunit-mock-objects.git",
-                "reference": "a23b761686d50a560cc56233b9ecf49597cc9118"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/phpunit-mock-objects/zipball/a23b761686d50a560cc56233b9ecf49597cc9118",
-                "reference": "a23b761686d50a560cc56233b9ecf49597cc9118",
-                "shasum": ""
-            },
-            "require": {
-                "doctrine/instantiator": "^1.0.2",
-                "php": "^5.6 || ^7.0",
-                "phpunit/php-text-template": "^1.2",
-                "sebastian/exporter": "^1.2 || ^2.0"
-            },
-            "conflict": {
-                "phpunit/phpunit": "<5.4.0"
-            },
-            "require-dev": {
-                "phpunit/phpunit": "^5.4"
-            },
-            "suggest": {
-                "ext-soap": "*"
-            },
-            "type": "library",
-            "extra": {
-                "branch-alias": {
-                    "dev-master": "3.2.x-dev"
-                }
-            },
-            "autoload": {
-                "classmap": [
-                    "src/"
-                ]
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "BSD-3-Clause"
-            ],
-            "authors": [
-                {
-                    "name": "Sebastian Bergmann",
-                    "email": "sb@sebastian-bergmann.de",
-                    "role": "lead"
-                }
-            ],
-            "description": "Mock Object library for PHPUnit",
-            "homepage": "https://github.com/sebastianbergmann/phpunit-mock-objects/",
-            "keywords": [
-                "mock",
-                "xunit"
-            ],
-            "time": "2017-06-30T09:13:00+00:00"
+            "time": "2019-10-28T10:37:36+00:00"
         },
         {
             "name": "sebastian/code-unit-reverse-lookup",
@@ -3182,30 +4612,30 @@
         },
         {
             "name": "sebastian/comparator",
-            "version": "1.2.4",
+            "version": "3.0.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/comparator.git",
-                "reference": "2b7424b55f5047b47ac6e5ccb20b2aea4011d9be"
+                "reference": "5de4fc177adf9bce8df98d8d141a7559d7ccf6da"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/comparator/zipball/2b7424b55f5047b47ac6e5ccb20b2aea4011d9be",
-                "reference": "2b7424b55f5047b47ac6e5ccb20b2aea4011d9be",
+                "url": "https://api.github.com/repos/sebastianbergmann/comparator/zipball/5de4fc177adf9bce8df98d8d141a7559d7ccf6da",
+                "reference": "5de4fc177adf9bce8df98d8d141a7559d7ccf6da",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.3",
-                "sebastian/diff": "~1.2",
-                "sebastian/exporter": "~1.2 || ~2.0"
+                "php": "^7.1",
+                "sebastian/diff": "^3.0",
+                "sebastian/exporter": "^3.1"
             },
             "require-dev": {
-                "phpunit/phpunit": "~4.4"
+                "phpunit/phpunit": "^7.1"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.2.x-dev"
+                    "dev-master": "3.0-dev"
                 }
             },
             "autoload": {
@@ -3236,38 +4666,39 @@
                 }
             ],
             "description": "Provides the functionality to compare PHP values for equality",
-            "homepage": "http://www.github.com/sebastianbergmann/comparator",
+            "homepage": "https://github.com/sebastianbergmann/comparator",
             "keywords": [
                 "comparator",
                 "compare",
                 "equality"
             ],
-            "time": "2017-01-29T09:50:25+00:00"
+            "time": "2018-07-12T15:12:46+00:00"
         },
         {
             "name": "sebastian/diff",
-            "version": "1.4.3",
+            "version": "3.0.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/diff.git",
-                "reference": "7f066a26a962dbe58ddea9f72a4e82874a3975a4"
+                "reference": "720fcc7e9b5cf384ea68d9d930d480907a0c1a29"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/diff/zipball/7f066a26a962dbe58ddea9f72a4e82874a3975a4",
-                "reference": "7f066a26a962dbe58ddea9f72a4e82874a3975a4",
+                "url": "https://api.github.com/repos/sebastianbergmann/diff/zipball/720fcc7e9b5cf384ea68d9d930d480907a0c1a29",
+                "reference": "720fcc7e9b5cf384ea68d9d930d480907a0c1a29",
                 "shasum": ""
             },
             "require": {
-                "php": "^5.3.3 || ^7.0"
+                "php": "^7.1"
             },
             "require-dev": {
-                "phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.0"
+                "phpunit/phpunit": "^7.5 || ^8.0",
+                "symfony/process": "^2 || ^3.3 || ^4"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.4-dev"
+                    "dev-master": "3.0-dev"
                 }
             },
             "autoload": {
@@ -3292,34 +4723,40 @@
             "description": "Diff implementation",
             "homepage": "https://github.com/sebastianbergmann/diff",
             "keywords": [
-                "diff"
+                "diff",
+                "udiff",
+                "unidiff",
+                "unified diff"
             ],
-            "time": "2017-05-22T07:24:03+00:00"
+            "time": "2019-02-04T06:01:07+00:00"
         },
         {
             "name": "sebastian/environment",
-            "version": "2.0.0",
+            "version": "4.2.3",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/environment.git",
-                "reference": "5795ffe5dc5b02460c3e34222fee8cbe245d8fac"
+                "reference": "464c90d7bdf5ad4e8a6aea15c091fec0603d4368"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/environment/zipball/5795ffe5dc5b02460c3e34222fee8cbe245d8fac",
-                "reference": "5795ffe5dc5b02460c3e34222fee8cbe245d8fac",
+                "url": "https://api.github.com/repos/sebastianbergmann/environment/zipball/464c90d7bdf5ad4e8a6aea15c091fec0603d4368",
+                "reference": "464c90d7bdf5ad4e8a6aea15c091fec0603d4368",
                 "shasum": ""
             },
             "require": {
-                "php": "^5.6 || ^7.0"
+                "php": "^7.1"
             },
             "require-dev": {
-                "phpunit/phpunit": "^5.0"
+                "phpunit/phpunit": "^7.5"
+            },
+            "suggest": {
+                "ext-posix": "*"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "2.0.x-dev"
+                    "dev-master": "4.2-dev"
                 }
             },
             "autoload": {
@@ -3344,34 +4781,34 @@
                 "environment",
                 "hhvm"
             ],
-            "time": "2016-11-26T07:53:53+00:00"
+            "time": "2019-11-20T08:46:58+00:00"
         },
         {
             "name": "sebastian/exporter",
-            "version": "2.0.0",
+            "version": "3.1.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/exporter.git",
-                "reference": "ce474bdd1a34744d7ac5d6aad3a46d48d9bac4c4"
+                "reference": "68609e1261d215ea5b21b7987539cbfbe156ec3e"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/exporter/zipball/ce474bdd1a34744d7ac5d6aad3a46d48d9bac4c4",
-                "reference": "ce474bdd1a34744d7ac5d6aad3a46d48d9bac4c4",
+                "url": "https://api.github.com/repos/sebastianbergmann/exporter/zipball/68609e1261d215ea5b21b7987539cbfbe156ec3e",
+                "reference": "68609e1261d215ea5b21b7987539cbfbe156ec3e",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.3",
-                "sebastian/recursion-context": "~2.0"
+                "php": "^7.0",
+                "sebastian/recursion-context": "^3.0"
             },
             "require-dev": {
                 "ext-mbstring": "*",
-                "phpunit/phpunit": "~4.4"
+                "phpunit/phpunit": "^6.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "2.0.x-dev"
+                    "dev-master": "3.1.x-dev"
                 }
             },
             "autoload": {
@@ -3384,6 +4821,10 @@
                 "BSD-3-Clause"
             ],
             "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
                 {
                     "name": "Jeff Welch",
                     "email": "whatthejeff@gmail.com"
@@ -3392,17 +4833,13 @@
                     "name": "Volker Dusch",
                     "email": "github@wallbash.com"
                 },
-                {
-                    "name": "Bernhard Schussek",
-                    "email": "bschussek@2bepublished.at"
-                },
-                {
-                    "name": "Sebastian Bergmann",
-                    "email": "sebastian@phpunit.de"
-                },
                 {
                     "name": "Adam Harvey",
                     "email": "aharvey@php.net"
+                },
+                {
+                    "name": "Bernhard Schussek",
+                    "email": "bschussek@gmail.com"
                 }
             ],
             "description": "Provides the functionality to export PHP variables for visualization",
@@ -3411,27 +4848,27 @@
                 "export",
                 "exporter"
             ],
-            "time": "2016-11-19T08:54:04+00:00"
+            "time": "2019-09-14T09:02:43+00:00"
         },
         {
             "name": "sebastian/global-state",
-            "version": "1.1.1",
+            "version": "2.0.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/global-state.git",
-                "reference": "bc37d50fea7d017d3d340f230811c9f1d7280af4"
+                "reference": "e8ba02eed7bbbb9e59e43dedd3dddeff4a56b0c4"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/global-state/zipball/bc37d50fea7d017d3d340f230811c9f1d7280af4",
-                "reference": "bc37d50fea7d017d3d340f230811c9f1d7280af4",
+                "url": "https://api.github.com/repos/sebastianbergmann/global-state/zipball/e8ba02eed7bbbb9e59e43dedd3dddeff4a56b0c4",
+                "reference": "e8ba02eed7bbbb9e59e43dedd3dddeff4a56b0c4",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.3"
+                "php": "^7.0"
             },
             "require-dev": {
-                "phpunit/phpunit": "~4.2"
+                "phpunit/phpunit": "^6.0"
             },
             "suggest": {
                 "ext-uopz": "*"
@@ -3439,7 +4876,7 @@
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.0-dev"
+                    "dev-master": "2.0-dev"
                 }
             },
             "autoload": {
@@ -3462,33 +4899,34 @@
             "keywords": [
                 "global state"
             ],
-            "time": "2015-10-12T03:26:01+00:00"
+            "time": "2017-04-27T15:39:26+00:00"
         },
         {
             "name": "sebastian/object-enumerator",
-            "version": "2.0.1",
+            "version": "3.0.3",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/object-enumerator.git",
-                "reference": "1311872ac850040a79c3c058bea3e22d0f09cbb7"
+                "reference": "7cfd9e65d11ffb5af41198476395774d4c8a84c5"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/object-enumerator/zipball/1311872ac850040a79c3c058bea3e22d0f09cbb7",
-                "reference": "1311872ac850040a79c3c058bea3e22d0f09cbb7",
+                "url": "https://api.github.com/repos/sebastianbergmann/object-enumerator/zipball/7cfd9e65d11ffb5af41198476395774d4c8a84c5",
+                "reference": "7cfd9e65d11ffb5af41198476395774d4c8a84c5",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.6",
-                "sebastian/recursion-context": "~2.0"
+                "php": "^7.0",
+                "sebastian/object-reflector": "^1.1.1",
+                "sebastian/recursion-context": "^3.0"
             },
             "require-dev": {
-                "phpunit/phpunit": "~5"
+                "phpunit/phpunit": "^6.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "2.0.x-dev"
+                    "dev-master": "3.0.x-dev"
                 }
             },
             "autoload": {
@@ -3508,32 +4946,77 @@
             ],
             "description": "Traverses array structures and object graphs to enumerate all referenced objects",
             "homepage": "https://github.com/sebastianbergmann/object-enumerator/",
-            "time": "2017-02-18T15:18:39+00:00"
+            "time": "2017-08-03T12:35:26+00:00"
+        },
+        {
+            "name": "sebastian/object-reflector",
+            "version": "1.1.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/object-reflector.git",
+                "reference": "773f97c67f28de00d397be301821b06708fca0be"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/object-reflector/zipball/773f97c67f28de00d397be301821b06708fca0be",
+                "reference": "773f97c67f28de00d397be301821b06708fca0be",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^6.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.1-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Allows reflection of object attributes, including inherited and non-public ones",
+            "homepage": "https://github.com/sebastianbergmann/object-reflector/",
+            "time": "2017-03-29T09:07:27+00:00"
         },
         {
             "name": "sebastian/recursion-context",
-            "version": "2.0.0",
+            "version": "3.0.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/recursion-context.git",
-                "reference": "2c3ba150cbec723aa057506e73a8d33bdb286c9a"
+                "reference": "5b0cd723502bac3b006cbf3dbf7a1e3fcefe4fa8"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/recursion-context/zipball/2c3ba150cbec723aa057506e73a8d33bdb286c9a",
-                "reference": "2c3ba150cbec723aa057506e73a8d33bdb286c9a",
+                "url": "https://api.github.com/repos/sebastianbergmann/recursion-context/zipball/5b0cd723502bac3b006cbf3dbf7a1e3fcefe4fa8",
+                "reference": "5b0cd723502bac3b006cbf3dbf7a1e3fcefe4fa8",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.3.3"
+                "php": "^7.0"
             },
             "require-dev": {
-                "phpunit/phpunit": "~4.4"
+                "phpunit/phpunit": "^6.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "2.0.x-dev"
+                    "dev-master": "3.0.x-dev"
                 }
             },
             "autoload": {
@@ -3561,29 +5044,29 @@
             ],
             "description": "Provides functionality to recursively process PHP variables",
             "homepage": "http://www.github.com/sebastianbergmann/recursion-context",
-            "time": "2016-11-19T07:33:16+00:00"
+            "time": "2017-03-03T06:23:57+00:00"
         },
         {
             "name": "sebastian/resource-operations",
-            "version": "1.0.0",
+            "version": "2.0.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/resource-operations.git",
-                "reference": "ce990bb21759f94aeafd30209e8cfcdfa8bc3f52"
+                "reference": "4d7a795d35b889bf80a0cc04e08d77cedfa917a9"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/resource-operations/zipball/ce990bb21759f94aeafd30209e8cfcdfa8bc3f52",
-                "reference": "ce990bb21759f94aeafd30209e8cfcdfa8bc3f52",
+                "url": "https://api.github.com/repos/sebastianbergmann/resource-operations/zipball/4d7a795d35b889bf80a0cc04e08d77cedfa917a9",
+                "reference": "4d7a795d35b889bf80a0cc04e08d77cedfa917a9",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.6.0"
+                "php": "^7.1"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "1.0.x-dev"
+                    "dev-master": "2.0-dev"
                 }
             },
             "autoload": {
@@ -3603,7 +5086,7 @@
             ],
             "description": "Provides a list of PHP built-in functions that operate on resources",
             "homepage": "https://www.github.com/sebastianbergmann/resource-operations",
-            "time": "2015-07-28T20:34:47+00:00"
+            "time": "2018-10-04T04:07:39+00:00"
         },
         {
             "name": "sebastian/version",
@@ -3649,38 +5132,38 @@
             "time": "2016-10-03T07:35:21+00:00"
         },
         {
-            "name": "symfony/class-loader",
-            "version": "v3.3.5",
+            "name": "symfony/dom-crawler",
+            "version": "v3.1.10",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/class-loader.git",
-                "reference": "386a294d621576302e7cc36965d6ed53b8c73c4f"
+                "url": "https://github.com/symfony/dom-crawler.git",
+                "reference": "7eede2a901a19928494194f7d1815a77b9a473a0"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/class-loader/zipball/386a294d621576302e7cc36965d6ed53b8c73c4f",
-                "reference": "386a294d621576302e7cc36965d6ed53b8c73c4f",
+                "url": "https://api.github.com/repos/symfony/dom-crawler/zipball/7eede2a901a19928494194f7d1815a77b9a473a0",
+                "reference": "7eede2a901a19928494194f7d1815a77b9a473a0",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9"
+                "php": ">=5.5.9",
+                "symfony/polyfill-mbstring": "~1.0"
             },
             "require-dev": {
-                "symfony/finder": "~2.8|~3.0",
-                "symfony/polyfill-apcu": "~1.1"
+                "symfony/css-selector": "~2.8|~3.0"
             },
             "suggest": {
-                "symfony/polyfill-apcu": "For using ApcClassLoader on HHVM"
+                "symfony/css-selector": ""
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-master": "3.3-dev"
+                    "dev-master": "3.1-dev"
                 }
             },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\ClassLoader\\": ""
+                    "Symfony\\Component\\DomCrawler\\": ""
                 },
                 "exclude-from-classmap": [
                     "/Tests/"
@@ -3700,102 +5183,77 @@
                     "homepage": "https://symfony.com/contributors"
                 }
             ],
-            "description": "Symfony ClassLoader Component",
+            "description": "Symfony DomCrawler Component",
             "homepage": "https://symfony.com",
-            "time": "2017-06-02T09:51:43+00:00"
+            "time": "2017-01-21T17:13:55+00:00"
         },
         {
-            "name": "symfony/dom-crawler",
-            "version": "v3.1.10",
+            "name": "theseer/tokenizer",
+            "version": "1.1.3",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/dom-crawler.git",
-                "reference": "7eede2a901a19928494194f7d1815a77b9a473a0"
+                "url": "https://github.com/theseer/tokenizer.git",
+                "reference": "11336f6f84e16a720dae9d8e6ed5019efa85a0f9"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/dom-crawler/zipball/7eede2a901a19928494194f7d1815a77b9a473a0",
-                "reference": "7eede2a901a19928494194f7d1815a77b9a473a0",
+                "url": "https://api.github.com/repos/theseer/tokenizer/zipball/11336f6f84e16a720dae9d8e6ed5019efa85a0f9",
+                "reference": "11336f6f84e16a720dae9d8e6ed5019efa85a0f9",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9",
-                "symfony/polyfill-mbstring": "~1.0"
-            },
-            "require-dev": {
-                "symfony/css-selector": "~2.8|~3.0"
-            },
-            "suggest": {
-                "symfony/css-selector": ""
+                "ext-dom": "*",
+                "ext-tokenizer": "*",
+                "ext-xmlwriter": "*",
+                "php": "^7.0"
             },
             "type": "library",
-            "extra": {
-                "branch-alias": {
-                    "dev-master": "3.1-dev"
-                }
-            },
             "autoload": {
-                "psr-4": {
-                    "Symfony\\Component\\DomCrawler\\": ""
-                },
-                "exclude-from-classmap": [
-                    "/Tests/"
+                "classmap": [
+                    "src/"
                 ]
             },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
-                "MIT"
+                "BSD-3-Clause"
             ],
             "authors": [
                 {
-                    "name": "Fabien Potencier",
-                    "email": "fabien@symfony.com"
-                },
-                {
-                    "name": "Symfony Community",
-                    "homepage": "https://symfony.com/contributors"
+                    "name": "Arne Blankerts",
+                    "role": "Developer",
+                    "email": "arne@blankerts.de"
                 }
             ],
-            "description": "Symfony DomCrawler Component",
-            "homepage": "https://symfony.com",
-            "time": "2017-01-21T17:13:55+00:00"
+            "description": "A small library for converting tokenized PHP source code into XML and potentially other formats",
+            "time": "2019-06-13T22:48:21+00:00"
         },
         {
-            "name": "symfony/yaml",
-            "version": "v3.3.5",
+            "name": "timacdonald/log-fake",
+            "version": "1.4.0",
             "source": {
                 "type": "git",
-                "url": "https://github.com/symfony/yaml.git",
-                "reference": "1f93a8d19b8241617f5074a123e282575b821df8"
+                "url": "https://github.com/timacdonald/log-fake.git",
+                "reference": "84a15f2e37128209b6617ea8f73cd3abaee79911"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/yaml/zipball/1f93a8d19b8241617f5074a123e282575b821df8",
-                "reference": "1f93a8d19b8241617f5074a123e282575b821df8",
+                "url": "https://api.github.com/repos/timacdonald/log-fake/zipball/84a15f2e37128209b6617ea8f73cd3abaee79911",
+                "reference": "84a15f2e37128209b6617ea8f73cd3abaee79911",
                 "shasum": ""
             },
             "require": {
-                "php": ">=5.5.9"
-            },
-            "require-dev": {
-                "symfony/console": "~2.8|~3.0"
-            },
-            "suggest": {
-                "symfony/console": "For validating YAML files using the lint command"
+                "illuminate/config": "~5.6|^6.0",
+                "illuminate/container": "~5.6|^6.0",
+                "illuminate/support": "~5.6|^6.0",
+                "php": "^7.1.3",
+                "phpunit/phpunit": "^7.0|^8.0",
+                "psr/log": "^1.0"
             },
             "type": "library",
-            "extra": {
-                "branch-alias": {
-                    "dev-master": "3.3-dev"
-                }
-            },
             "autoload": {
                 "psr-4": {
-                    "Symfony\\Component\\Yaml\\": ""
-                },
-                "exclude-from-classmap": [
-                    "/Tests/"
-                ]
+                    "TiMacDonald\\Log\\": "src"
+                }
             },
             "notification-url": "https://packagist.org/downloads/",
             "license": [
@@ -3803,38 +5261,41 @@
             ],
             "authors": [
                 {
-                    "name": "Fabien Potencier",
-                    "email": "fabien@symfony.com"
-                },
-                {
-                    "name": "Symfony Community",
-                    "homepage": "https://symfony.com/contributors"
+                    "name": "Tim MacDonald",
+                    "email": "hello@timacdonald.me",
+                    "homepage": "https://timacdonald.me"
                 }
             ],
-            "description": "Symfony Yaml Component",
-            "homepage": "https://symfony.com",
-            "time": "2017-06-15T12:58:50+00:00"
+            "description": "A drop in fake logger for testing with the Laravel framework.",
+            "keywords": [
+                "fake",
+                "laravel",
+                "log",
+                "logger",
+                "testing"
+            ],
+            "time": "2019-09-19T21:39:39+00:00"
         },
         {
             "name": "webmozart/assert",
-            "version": "1.2.0",
+            "version": "1.5.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/webmozart/assert.git",
-                "reference": "2db61e59ff05fe5126d152bd0655c9ea113e550f"
+                "reference": "88e6d84706d09a236046d686bbea96f07b3a34f4"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/webmozart/assert/zipball/2db61e59ff05fe5126d152bd0655c9ea113e550f",
-                "reference": "2db61e59ff05fe5126d152bd0655c9ea113e550f",
+                "url": "https://api.github.com/repos/webmozart/assert/zipball/88e6d84706d09a236046d686bbea96f07b3a34f4",
+                "reference": "88e6d84706d09a236046d686bbea96f07b3a34f4",
                 "shasum": ""
             },
             "require": {
-                "php": "^5.3.3 || ^7.0"
+                "php": "^5.3.3 || ^7.0",
+                "symfony/polyfill-ctype": "^1.8"
             },
             "require-dev": {
-                "phpunit/phpunit": "^4.6",
-                "sebastian/version": "^1.0.1"
+                "phpunit/phpunit": "^4.8.36 || ^7.5.13"
             },
             "type": "library",
             "extra": {
@@ -3863,7 +5324,7 @@
                 "check",
                 "validate"
             ],
-            "time": "2016-11-23T20:04:58+00:00"
+            "time": "2019-08-24T08:43:50+00:00"
         }
     ],
     "aliases": [],
@@ -3872,7 +5333,7 @@
     "prefer-stable": false,
     "prefer-lowest": false,
     "platform": {
-        "php": ">=5.6.4"
+        "php": ">=7.1.0"
     },
     "platform-dev": []
 }
diff --git a/config/app.php b/config/app.php
index 953e53d..e84b143 100644
--- a/config/app.php
+++ b/config/app.php
@@ -12,7 +12,7 @@
     | any other location as required by the application or its packages.
     */
 
-    'name' => 'Laravel',
+    'name' => 'HSHS-DOMXSS-Scanner',
 
     /*
     |--------------------------------------------------------------------------
@@ -107,23 +107,6 @@
 
     'cipher' => 'AES-256-CBC',
 
-    /*
-    |--------------------------------------------------------------------------
-    | Logging Configuration
-    |--------------------------------------------------------------------------
-    |
-    | Here you may configure the log settings for your application. Out of
-    | the box, Laravel uses the Monolog PHP logging library. This gives
-    | you a variety of powerful log handlers / formatters to utilize.
-    |
-    | Available Settings: "single", "daily", "syslog", "errorlog"
-    |
-    */
-
-    'log' => env('APP_LOG', 'single'),
-
-    'log_level' => env('APP_LOG_LEVEL', 'debug'),
-
     /*
     |--------------------------------------------------------------------------
     | Autoloaded Service Providers
@@ -178,8 +161,6 @@
         App\Providers\EventServiceProvider::class,
         App\Providers\RouteServiceProvider::class,
 
-        Barryvdh\LaravelIdeHelper\IdeHelperServiceProvider::class,
-
     ],
 
     /*
@@ -195,42 +176,38 @@
 
     'aliases' => [
 
-        'App' => Illuminate\Support\Facades\App::class,
-        'Artisan' => Illuminate\Support\Facades\Artisan::class,
-        'Auth' => Illuminate\Support\Facades\Auth::class,
-        'Blade' => Illuminate\Support\Facades\Blade::class,
-        'Bus' => Illuminate\Support\Facades\Bus::class,
-        'Cache' => Illuminate\Support\Facades\Cache::class,
-        'Config' => Illuminate\Support\Facades\Config::class,
-        'Cookie' => Illuminate\Support\Facades\Cookie::class,
-        'Crypt' => Illuminate\Support\Facades\Crypt::class,
-        'DB' => Illuminate\Support\Facades\DB::class,
-        'Eloquent' => Illuminate\Database\Eloquent\Model::class,
-        'Event' => Illuminate\Support\Facades\Event::class,
-        'File' => Illuminate\Support\Facades\File::class,
-        'Gate' => Illuminate\Support\Facades\Gate::class,
-        'Hash' => Illuminate\Support\Facades\Hash::class,
-        'Lang' => Illuminate\Support\Facades\Lang::class,
-        'Log' => Illuminate\Support\Facades\Log::class,
-        'Mail' => Illuminate\Support\Facades\Mail::class,
+        'App'          => Illuminate\Support\Facades\App::class,
+        'Artisan'      => Illuminate\Support\Facades\Artisan::class,
+        'Auth'         => Illuminate\Support\Facades\Auth::class,
+        'Blade'        => Illuminate\Support\Facades\Blade::class,
+        'Bus'          => Illuminate\Support\Facades\Bus::class,
+        'Cache'        => Illuminate\Support\Facades\Cache::class,
+        'Config'       => Illuminate\Support\Facades\Config::class,
+        'Cookie'       => Illuminate\Support\Facades\Cookie::class,
+        'Crypt'        => Illuminate\Support\Facades\Crypt::class,
+        'DB'           => Illuminate\Support\Facades\DB::class,
+        'Eloquent'     => Illuminate\Database\Eloquent\Model::class,
+        'Event'        => Illuminate\Support\Facades\Event::class,
+        'File'         => Illuminate\Support\Facades\File::class,
+        'Gate'         => Illuminate\Support\Facades\Gate::class,
+        'Hash'         => Illuminate\Support\Facades\Hash::class,
+        'Lang'         => Illuminate\Support\Facades\Lang::class,
+        'Log'          => Illuminate\Support\Facades\Log::class,
+        'Mail'         => Illuminate\Support\Facades\Mail::class,
         'Notification' => Illuminate\Support\Facades\Notification::class,
-        'Password' => Illuminate\Support\Facades\Password::class,
-        'Queue' => Illuminate\Support\Facades\Queue::class,
-        'Redirect' => Illuminate\Support\Facades\Redirect::class,
-        'Redis' => Illuminate\Support\Facades\Redis::class,
-        'Request' => Illuminate\Support\Facades\Request::class,
-        'Response' => Illuminate\Support\Facades\Response::class,
-        'Route' => Illuminate\Support\Facades\Route::class,
-        'Schema' => Illuminate\Support\Facades\Schema::class,
-        'Session' => Illuminate\Support\Facades\Session::class,
-        'Storage' => Illuminate\Support\Facades\Storage::class,
-        'URL' => Illuminate\Support\Facades\URL::class,
-        'Validator' => Illuminate\Support\Facades\Validator::class,
-        'View' => Illuminate\Support\Facades\View::class,
-
-        'Form' => Collective\Html\FormFacade::class,
-        'Html' => Collective\Html\HtmlFacade::class,
-
+        'Password'     => Illuminate\Support\Facades\Password::class,
+        'Queue'        => Illuminate\Support\Facades\Queue::class,
+        'Redirect'     => Illuminate\Support\Facades\Redirect::class,
+        'Redis'        => Illuminate\Support\Facades\Redis::class,
+        'Request'      => Illuminate\Support\Facades\Request::class,
+        'Response'     => Illuminate\Support\Facades\Response::class,
+        'Route'        => Illuminate\Support\Facades\Route::class,
+        'Schema'       => Illuminate\Support\Facades\Schema::class,
+        'Session'      => Illuminate\Support\Facades\Session::class,
+        'Storage'      => Illuminate\Support\Facades\Storage::class,
+        'URL'          => Illuminate\Support\Facades\URL::class,
+        'Validator'    => Illuminate\Support\Facades\Validator::class,
+        'View'         => Illuminate\Support\Facades\View::class,
     ],
 
 ];
diff --git a/config/auth.php b/config/auth.php
index 7817501..a9264b4 100644
--- a/config/auth.php
+++ b/config/auth.php
@@ -14,7 +14,7 @@
     */
 
     'defaults' => [
-        'guard' => 'web',
+        'guard'     => 'web',
         'passwords' => 'users',
     ],
 
@@ -37,12 +37,12 @@
 
     'guards' => [
         'web' => [
-            'driver' => 'session',
+            'driver'   => 'session',
             'provider' => 'users',
         ],
 
         'api' => [
-            'driver' => 'token',
+            'driver'   => 'token',
             'provider' => 'users',
         ],
     ],
@@ -67,7 +67,7 @@
     'providers' => [
         'users' => [
             'driver' => 'eloquent',
-            'model' => App\User::class,
+            'model'  => App\User::class,
         ],
 
         // 'users' => [
@@ -94,8 +94,8 @@
     'passwords' => [
         'users' => [
             'provider' => 'users',
-            'table' => 'password_resets',
-            'expire' => 60,
+            'table'    => 'password_resets',
+            'expire'   => 60,
         ],
     ],
 
diff --git a/config/broadcasting.php b/config/broadcasting.php
index 19a59ba..897e32b 100644
--- a/config/broadcasting.php
+++ b/config/broadcasting.php
@@ -31,17 +31,17 @@
     'connections' => [
 
         'pusher' => [
-            'driver' => 'pusher',
-            'key' => env('PUSHER_KEY'),
-            'secret' => env('PUSHER_SECRET'),
-            'app_id' => env('PUSHER_APP_ID'),
+            'driver'  => 'pusher',
+            'key'     => env('PUSHER_KEY'),
+            'secret'  => env('PUSHER_SECRET'),
+            'app_id'  => env('PUSHER_APP_ID'),
             'options' => [
                 //
             ],
         ],
 
         'redis' => [
-            'driver' => 'redis',
+            'driver'     => 'redis',
             'connection' => 'default',
         ],
 
diff --git a/config/cache.php b/config/cache.php
index 1d3de87..6026d0e 100644
--- a/config/cache.php
+++ b/config/cache.php
@@ -1,4 +1,5 @@
 <?php
+use Illuminate\Support\Str;
 
 return [
 
@@ -39,20 +40,20 @@
         ],
 
         'database' => [
-            'driver' => 'database',
-            'table' => 'cache',
+            'driver'     => 'database',
+            'table'      => 'cache',
             'connection' => null,
         ],
 
         'file' => [
             'driver' => 'file',
-            'path' => storage_path('framework/cache'),
+            'path'   => storage_path('framework/cache'),
         ],
 
         'memcached' => [
-            'driver' => 'memcached',
+            'driver'        => 'memcached',
             'persistent_id' => env('MEMCACHED_PERSISTENT_ID'),
-            'sasl' => [
+            'sasl'          => [
                 env('MEMCACHED_USERNAME'),
                 env('MEMCACHED_PASSWORD'),
             ],
@@ -61,15 +62,15 @@
             ],
             'servers' => [
                 [
-                    'host' => env('MEMCACHED_HOST', '127.0.0.1'),
-                    'port' => env('MEMCACHED_PORT', 11211),
+                    'host'   => env('MEMCACHED_HOST', '127.0.0.1'),
+                    'port'   => env('MEMCACHED_PORT', 11211),
                     'weight' => 100,
                 ],
             ],
         ],
 
         'redis' => [
-            'driver' => 'redis',
+            'driver'     => 'redis',
             'connection' => 'default',
         ],
 
@@ -86,6 +87,5 @@
     |
     */
 
-    'prefix' => 'laravel',
-
+    'prefix' => env('CACHE_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_') . '_cache'),
 ];
diff --git a/config/database.php b/config/database.php
index fd22e8e..2a6d90b 100644
--- a/config/database.php
+++ b/config/database.php
@@ -1,4 +1,5 @@
 <?php
+use Illuminate\Support\Str;
 
 return [
 
@@ -47,36 +48,36 @@
     'connections' => [
 
         'sqlite' => [
-            'driver' => 'sqlite',
+            'driver'   => 'sqlite',
             'database' => env('DB_DATABASE', database_path('database.sqlite')),
-            'prefix' => '',
+            'prefix'   => '',
         ],
 
         'mysql' => [
-            'driver' => 'mysql',
-            'host' => env('DB_HOST', 'localhost'),
-            'port' => env('DB_PORT', '3306'),
-            'database' => env('DB_DATABASE', 'forge'),
-            'username' => env('DB_USERNAME', 'forge'),
-            'password' => env('DB_PASSWORD', ''),
-            'charset' => 'utf8',
+            'driver'    => 'mysql',
+            'host'      => env('DB_HOST', 'localhost'),
+            'port'      => env('DB_PORT', '3306'),
+            'database'  => env('DB_DATABASE', 'forge'),
+            'username'  => env('DB_USERNAME', 'forge'),
+            'password'  => env('DB_PASSWORD', ''),
+            'charset'   => 'utf8',
             'collation' => 'utf8_unicode_ci',
-            'prefix' => '',
-            'strict' => true,
-            'engine' => null,
+            'prefix'    => '',
+            'strict'    => true,
+            'engine'    => null,
         ],
 
         'pgsql' => [
-            'driver' => 'pgsql',
-            'host' => env('DB_HOST', 'localhost'),
-            'port' => env('DB_PORT', '5432'),
+            'driver'   => 'pgsql',
+            'host'     => env('DB_HOST', 'localhost'),
+            'port'     => env('DB_PORT', '5432'),
             'database' => env('DB_DATABASE', 'forge'),
             'username' => env('DB_USERNAME', 'forge'),
             'password' => env('DB_PASSWORD', ''),
-            'charset' => 'utf8',
-            'prefix' => '',
-            'schema' => 'public',
-            'sslmode' => 'prefer',
+            'charset'  => 'utf8',
+            'prefix'   => '',
+            'schema'   => 'public',
+            'sslmode'  => 'prefer',
         ],
 
     ],
@@ -106,16 +107,23 @@
     */
 
     'redis' => [
-
-        'cluster' => false,
-
+        'client' => env('REDIS_CLIENT', 'predis'),
+        'options' => [
+            'cluster' => env('REDIS_CLUSTER', 'predis'),
+            'prefix' => Str::slug(env('APP_NAME', 'laravel'), '_') . '_database_',
+        ],
         'default' => [
-            'host' => env('REDIS_HOST', 'localhost'),
+            'host' => env('REDIS_HOST', '127.0.0.1'),
             'password' => env('REDIS_PASSWORD', null),
             'port' => env('REDIS_PORT', 6379),
-            'database' => 0,
+            'database' => env('REDIS_DB', 0),
+        ],
+        'cache' => [
+            'host' => env('REDIS_HOST', '127.0.0.1'),
+            'password' => env('REDIS_PASSWORD', null),
+            'port' => env('REDIS_PORT', 6379),
+            'database' => env('REDIS_CACHE_DB', 1),
         ],
-
     ],
 
 ];
diff --git a/config/filesystems.php b/config/filesystems.php
index 75b5002..7d0d0ed 100644
--- a/config/filesystems.php
+++ b/config/filesystems.php
@@ -45,18 +45,18 @@
 
         'local' => [
             'driver' => 'local',
-            'root' => storage_path('app'),
+            'root'   => storage_path('app'),
         ],
 
         'public' => [
-            'driver' => 'local',
-            'root' => storage_path('app/public'),
+            'driver'     => 'local',
+            'root'       => storage_path('app/public'),
             'visibility' => 'public',
         ],
 
         's3' => [
             'driver' => 's3',
-            'key' => 'your-key',
+            'key'    => 'your-key',
             'secret' => 'your-secret',
             'region' => 'your-region',
             'bucket' => 'your-bucket',
diff --git a/config/hashing.php b/config/hashing.php
new file mode 100644
index 0000000..5b10c09
--- /dev/null
+++ b/config/hashing.php
@@ -0,0 +1,52 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Hash Driver
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default hash driver that will be used to hash
+    | passwords for your application. By default, the bcrypt algorithm is
+    | used; however, you remain free to modify this option if you wish.
+    |
+    | Supported: "bcrypt", "argon", "argon2id"
+    |
+    */
+
+    'driver' => 'bcrypt',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Bcrypt Options
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the configuration options that should be used when
+    | passwords are hashed using the Bcrypt algorithm. This will allow you
+    | to control the amount of time it takes to hash the given password.
+    |
+    */
+
+    'bcrypt' => [
+        'rounds' => env('BCRYPT_ROUNDS', 10),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Argon Options
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the configuration options that should be used when
+    | passwords are hashed using the Argon algorithm. These will allow you
+    | to control the amount of time it takes to hash the given password.
+    |
+    */
+
+    'argon' => [
+        'memory'  => 1024,
+        'threads' => 2,
+        'time'    => 2,
+    ],
+
+];
diff --git a/config/logging.php b/config/logging.php
new file mode 100644
index 0000000..a5c2b1a
--- /dev/null
+++ b/config/logging.php
@@ -0,0 +1,92 @@
+<?php
+
+use Monolog\Handler\StreamHandler;
+use Monolog\Handler\SyslogUdpHandler;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Log Channel
+    |--------------------------------------------------------------------------
+    |
+    | This option defines the default log channel that gets used when writing
+    | messages to the logs. The name specified in this option should match
+    | one of the channels defined in the "channels" configuration array.
+    |
+    */
+
+    'default' => env('LOG_CHANNEL', 'stack'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Log Channels
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the log channels for your application. Out of
+    | the box, Laravel uses the Monolog PHP logging library. This gives
+    | you a variety of powerful log handlers / formatters to utilize.
+    |
+    | Available Drivers: "single", "daily", "slack", "syslog",
+    |                    "errorlog", "monolog",
+    |                    "custom", "stack"
+    |
+    */
+
+    'channels' => [
+        'stack' => [
+            'driver'   => 'stack',
+            'channels' => ['daily'],
+        ],
+
+        'single' => [
+            'driver' => 'single',
+            'path'   => storage_path('logs/laravel.log'),
+            'level'  => 'debug',
+        ],
+
+        'daily' => [
+            'driver' => 'daily',
+            'path'   => storage_path('logs/laravel.log'),
+            'level'  => 'debug',
+            'days'   => 14,
+        ],
+
+        'slack' => [
+            'driver'   => 'slack',
+            'url'      => env('LOG_SLACK_WEBHOOK_URL'),
+            'username' => 'Laravel Log',
+            'emoji'    => ':boom:',
+            'level'    => 'critical',
+        ],
+
+        'papertrail' => [
+            'driver'       => 'monolog',
+            'level'        => 'debug',
+            'handler'      => SyslogUdpHandler::class,
+            'handler_with' => [
+                'host' => env('PAPERTRAIL_URL'),
+                'port' => env('PAPERTRAIL_PORT'),
+            ],
+        ],
+
+        'stderr' => [
+            'driver'  => 'monolog',
+            'handler' => StreamHandler::class,
+            'with'    => [
+                'stream' => 'php://stderr',
+            ],
+        ],
+
+        'syslog' => [
+            'driver' => 'syslog',
+            'level'  => 'debug',
+        ],
+
+        'errorlog' => [
+            'driver' => 'errorlog',
+            'level'  => 'debug',
+        ],
+    ],
+
+];
diff --git a/config/mail.php b/config/mail.php
index 9d4c4d8..5f20a8b 100644
--- a/config/mail.php
+++ b/config/mail.php
@@ -57,7 +57,7 @@
 
     'from' => [
         'address' => 'hello@example.com',
-        'name' => 'Example',
+        'name'    => 'Example',
     ],
 
     /*
diff --git a/config/queue.php b/config/queue.php
index 549322e..91a5068 100644
--- a/config/queue.php
+++ b/config/queue.php
@@ -35,33 +35,34 @@
         ],
 
         'database' => [
-            'driver' => 'database',
-            'table' => 'jobs',
-            'queue' => 'default',
+            'driver'      => 'database',
+            'table'       => 'jobs',
+            'queue'       => 'default',
             'retry_after' => 90,
         ],
 
         'beanstalkd' => [
-            'driver' => 'beanstalkd',
-            'host' => 'localhost',
-            'queue' => 'default',
+            'driver'      => 'beanstalkd',
+            'host'        => 'localhost',
+            'queue'       => 'default',
             'retry_after' => 90,
         ],
 
         'sqs' => [
             'driver' => 'sqs',
-            'key' => 'your-public-key',
+            'key'    => 'your-public-key',
             'secret' => 'your-secret-key',
             'prefix' => 'https://sqs.us-east-1.amazonaws.com/your-account-id',
-            'queue' => 'your-queue-name',
+            'queue'  => 'your-queue-name',
             'region' => 'us-east-1',
         ],
 
         'redis' => [
             'driver' => 'redis',
             'connection' => 'default',
-            'queue' => 'default',
+            'queue' => env('REDIS_QUEUE', 'default'),
             'retry_after' => 90,
+            'block_for' => null,
         ],
 
     ],
@@ -79,7 +80,7 @@
 
     'failed' => [
         'database' => env('DB_CONNECTION', 'mysql'),
-        'table' => 'failed_jobs',
+        'table'    => 'failed_jobs',
     ],
 
 ];
diff --git a/config/services.php b/config/services.php
index 4460f0e..6bb0952 100644
--- a/config/services.php
+++ b/config/services.php
@@ -20,7 +20,7 @@
     ],
 
     'ses' => [
-        'key' => env('SES_KEY'),
+        'key'    => env('SES_KEY'),
         'secret' => env('SES_SECRET'),
         'region' => 'us-east-1',
     ],
@@ -30,8 +30,8 @@
     ],
 
     'stripe' => [
-        'model' => App\User::class,
-        'key' => env('STRIPE_KEY'),
+        'model'  => App\User::class,
+        'key'    => env('STRIPE_KEY'),
         'secret' => env('STRIPE_SECRET'),
     ],
 
diff --git a/database/factories/ModelFactory.php b/database/factories/ModelFactory.php
index e0dc869..1bd6dab 100644
--- a/database/factories/ModelFactory.php
+++ b/database/factories/ModelFactory.php
@@ -15,9 +15,9 @@
     static $password;
 
     return [
-        'name' => $faker->name,
-        'email' => $faker->unique()->safeEmail,
-        'password' => $password ?: $password = bcrypt('secret'),
+        'name'           => $faker->name,
+        'email'          => $faker->unique()->safeEmail,
+        'password'       => $password ?: $password = bcrypt('secret'),
         'remember_token' => str_random(10),
     ];
 });
diff --git a/database/migrations/2016_12_13_094349_create_jobs_table.php b/database/migrations/2016_12_13_094349_create_jobs_table.php
index 9df88d3..307f980 100644
--- a/database/migrations/2016_12_13_094349_create_jobs_table.php
+++ b/database/migrations/2016_12_13_094349_create_jobs_table.php
@@ -1,8 +1,8 @@
 <?php
 
-use Illuminate\Support\Facades\Schema;
-use Illuminate\Database\Schema\Blueprint;
 use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
 
 class CreateJobsTable extends Migration
 {
diff --git a/database/migrations/2016_12_13_130451_create_failed_jobs_table.php b/database/migrations/2016_12_13_130451_create_failed_jobs_table.php
index 843b93d..09e7543 100644
--- a/database/migrations/2016_12_13_130451_create_failed_jobs_table.php
+++ b/database/migrations/2016_12_13_130451_create_failed_jobs_table.php
@@ -1,8 +1,8 @@
 <?php
 
-use Illuminate\Support\Facades\Schema;
-use Illuminate\Database\Schema\Blueprint;
 use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
 
 class CreateFailedJobsTable extends Migration
 {
diff --git a/package.json b/package.json
deleted file mode 100644
index 4110c4e..0000000
--- a/package.json
+++ /dev/null
@@ -1,13 +0,0 @@
-{
-  "private": true,
-  "scripts": {
-    "dev": "node node_modules/cross-env/dist/bin/cross-env.js NODE_ENV=development node_modules/webpack/bin/webpack.js --progress --hide-modules --config=node_modules/laravel-mix/setup/webpack.config.js",
-    "watch": "node node_modules/cross-env/dist/bin/cross-env.js NODE_ENV=development node_modules/webpack/bin/webpack.js --watch --progress --hide-modules --config=node_modules/laravel-mix/setup/webpack.config.js",
-    "watch-poll": "node node_modules/cross-env/dist/bin/cross-env.js NODE_ENV=development node_modules/webpack/bin/webpack.js --watch --watch-poll --progress --hide-modules --config=node_modules/laravel-mix/setup/webpack.config.js",
-    "hot": "node node_modules/cross-env/dist/bin/cross-env.js NODE_ENV=development node_modules/webpack-dev-server/bin/webpack-dev-server.js --inline --hot --config=node_modules/laravel-mix/setup/webpack.config.js",
-    "production": "node node_modules/cross-env/dist/bin/cross-env.js NODE_ENV=production node_modules/webpack/bin/webpack.js --progress --hide-modules --config=node_modules/laravel-mix/setup/webpack.config.js"
-  },
-  "devDependencies": {
-    "laravel-mix": "^0.8.8"
-  }
-}
diff --git a/public/index.php b/public/index.php
index 716731f..d037794 100644
--- a/public/index.php
+++ b/public/index.php
@@ -1,9 +1,8 @@
 <?php
 
 /**
- * Laravel - A PHP Framework For Web Artisans
+ * Laravel - A PHP Framework For Web Artisans.
  *
- * @package  Laravel
  * @author   Taylor Otwell <taylor@laravel.com>
  */
 
diff --git a/public/mix-manifest.json b/public/mix-manifest.json
deleted file mode 100644
index 2fe55f9..0000000
--- a/public/mix-manifest.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "/js/start.js": "/js/start.34ed1d6c0b99584b0180.js",
-  "/css/app.css": "/css/app.19416ae625bacccaae46.css"
-}
\ No newline at end of file
diff --git a/readme.md b/readme.md
deleted file mode 100644
index 1a553c7..0000000
--- a/readme.md
+++ /dev/null
@@ -1,285 +0,0 @@
-# SIWECOS Documentation
-
-This documentation describes the two modules "HTTP Secure Header Scanner" and "DOMXSS-Scanner".
-
-# HTTP Secure Header Scanner
-This module scans the HTTP header of a specific URL and returns a report that can be used to improve the configuration for a better security.
-
-## API-Call
-`http://localhost/api/v1/header?url=http://siwecos.de`
-
-### Sample output
-```json
-{
-    "checks": {
-        "Content-Type": {
-            "result": false,
-            "comment": "The header is set with the charset and follows the best practice.",
-            "directive": [
-                "text/html; charset=UTF-8"
-            ]
-        },
-        "Content-Security-Policy": {
-            "result": true,
-            "comment": "The header is not set.",
-            "directive": null
-        },
-        "Public-Key-Pins": {
-            "result": true,
-            "comment": "The header is not set.",
-            "directive": null
-        },
-        "Strict-Transport-Security": {
-            "result": true,
-            "comment": "The header is not set.",
-            "directive": null
-        },
-        "X-Content-Type-Options": {
-            "result": false,
-            "comment": "The header is set correctly.",
-            "directive": [
-                "nosniff"
-            ]
-        },
-        "X-Frame-Options": {
-            "result": false,
-            "comment": "The header is set and does not contain any wildcard.",
-            "directive": [
-                "SAMEORIGIN"
-            ]
-        },
-        "X-Xss-Protection": {
-            "result": false,
-            "comment": "The header is set correctly.\n\"mode=block\" is activated.",
-            "directive": [
-                "1; mode=block"
-            ]
-        }
-    }
-}
-
-```
-
-
-## Scanned headers and descriptions
-
-
-### Content-Type (`Content-Type`)
-
-##### Description
-When a server sends a document to a user agent (eg. a browser) it also sends information in the Content-Type field of the accompanying HTTP header about what type of data format this is. This information is expressed using a MIME type label. Documents transmitted with HTTP that are of type text, such as text/html, text/plain, etc., can send a charset parameter in the HTTP header to specify the character encoding of the document.
-
-##### Best-Practice
-`text/html; charset=utf-8;`
-
-##### Scan-Result
-`false`: 
-- The header is set and contains a charset.
-
-`true`: 
-- The header is not set correctly. 
-
-##### Impact and Feasibility (10/10)
-A correct header with the setted charset prevents different XSS attacks that use other charsets than the original webpage so they can bypass XSS prevention.
-
-It's easy and harmless to set the correct charset without affecting the sites content.
-
-
-
-
-### Content-Security-Policy (`Content-Security-Policy`)
-
-##### Description
-Content Security Policy (CSP) requires careful tuning and precise definition of the policy. If enabled, CSP has significant impact on the way browser renders pages (e.g., inline JavaScript disabled by default and must be explicitly allowed in policy). CSP prevents a wide range of attacks, including Cross-site scripting and other cross-site injections.
-
-##### Best-Practice
-Best Practice is to use the CSP with `default-src 'none'` and without any `unsafe-eval` or `unsafe-inline` directives.
-
-##### Scan-Result
-
-`false`: 
-- The header is set does not contain `unsafe-eval` or `unsafe-inline`.
-
-`true`: 
-- The header is not set or does contain `unsafe-eval` or `unsafe-inline`.
-
-##### Impact and Feasibility (7/10)
-The Content-Security-Policy can prevent a wide range of attacks that infiltrate external content and code. With the correct setting it's a powerful method to increase the sites security.
-
-On the other hand it's often not possible to set a secure CSP header without modifying the website's source code.
-
-Impact-Rating: 10/10 | Feasibility: 5/10
-
-
-
-
-### Public-Key-Pins (`Public-Key-Pins`)
-
-##### Description
-HTTP Public Key Pinning (HPKP) is a security mechanism which allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates. (For example, sometimes attackers can compromise certificate authorities, and then can mis-issue certificates for a web origin.).
-
-##### Best-Practice
-`pin-sha256="<HASH>"; pin-sha256="<HASH>"; max-age=2592000; includeSubDomains`
-
-##### Scan-Result
-
-`false`: 
-- The header is set correctly.
-
-`true`: 
-- The header is not set.
-
-##### Impact and Feasibility (3/10)
-For small and medium-sized enterprises as is the target group of SIWECOS this header is a 'nice to have' but not a absolutely must.
-
-If this header is misconfigured your website would not be available for the users until the correct certificates are used or `max-age` is reached.
-
-
-
-### Strict-Transport-Security (`Strict-Transport-Security`)
-
-##### Description
-HTTP Strict Transport Security (HSTS) is a web security policy mechanism which helps to protect websites against protocol downgrade attacks and cookie hijacking. It allows web servers to declare that web browsers (or other complying user agents) should only interact with it using secure HTTPS connections, and never via the insecure HTTP protocol.
-
-##### Best-Practice
-`max-age=63072000; includeSubdomains`
-
-##### Scan-Result
-
-`false`: 
-- The header is set correctly.
-
-`true`: 
-- The header is not set.
-
-##### Impact and Feasibility (10/10)
-This is a must-have header for every webpage and easy and harmless to integrate.
-The header guaranteed that the traffic between the server and client has to be encrypted to communicate.
-
-
-
-### X-Content-Type-Options (`X-Content-Type-Options`)
-
-##### Description
-Setting this header will prevent the browser from interpreting files as something else than declared by the content type in the HTTP headers.
-
-##### Best-Practice
-`nosniff`
-
-##### Scan-Result
-
-`false`: 
-- The header is set correctly.
-
-`true`: 
-- The header is not set.
-
-##### Impact and Feasibility (6/10)
-Easy to implement and no further adjustments on the website are needed.
-Only effects Internet Explorer.
-
-
-
-
-### X-Frame-Options (`X-Frame-Options`)
-
-##### Description
-X-Frame-Options response header improve the protection of web applications against Clickjacking. It declares a policy communicated from a host to the client browser on whether the browser must not display the transmitted content in frames of other web pages.
-
-##### Best-Practice
-Best Practice is to set this header accordingly to your needs. 
-
-Do not use `allow-from: *`
-
-##### Scan-Result
-
-`false`: 
-- The header is set correctly.
-
-`true`: 
-- The header is not set or contains wildcards `*`.
-
-
-##### Impact and Feasibility (9/10)
-Prevents Clickjacking attacks.
-
-Easy to implement and no further adjustments on the website are needed.
-
-
-
-
-### X-Xss-Protection (`X-Xss-Protection`)
-
-##### Description
-This header enables the Cross-site scripting (XSS) filter in the browser.
-
-##### Best-Practice
-`1; mode=block`
-
-##### Scan-Result
-
-`false`: 
-- The header is set correctly.
-
-`true`: 
-- The header is not set.
-
-
-##### Impact and Feasibility (9/10)
-Prevents reflected XSS attacks.
-
-Easy to implement and no further adjustments on the website are needed.
-
-
-# DOMXSS-Scanner
-This module scans the given URL and checks for DOMXSS sinks and sources.
-
-## API-Call
-`http://localhost/api/v1/domxss?url=http://siwecos.de`
-
-### Sample output
-```json
-{
-    "checks": {
-        "sinks":true,
-        "sources":true
-    }
-}
-```
-
-## Scanned tasks and descriptions
-
-### Sources (`sources`)
-
-##### Description
-A source is an input that could be controlled by an external (untrusted) source.
- > https://github.com/wisec/domxsswiki/wiki/Glossary
- 
-##### Scan-Result
-`true`:
- - At least one source was found on the scanned URL.
- 
-`false`:
-- No sources were found on the scanned URL
-
-##### Impact (1/10)
-The scan's result can only be used as an indication if there might be security vulnerabilities.
-Further advanced tests would be needed to confirm if there are vulnerabilities on the site or not.
-
-
-### Sinks (`sinks`)
-
-##### Description
-A sink is a potentially dangerous method that could lead to a vulnerability. In this case a DOM Based XSS.
- > https://github.com/wisec/domxsswiki/wiki/Glossary
- 
-##### Scan-Result
-`true`:
- - At least one sink was found on the scanned URL.
- 
-`false`:
-- No sinks were found on the scanned URL
-
-##### Impact (2/10)
-The scan's result can only be used as an indication if there might be security vulnerabilities.
-Further advanced tests would be needed to confirm if there are vulnerabilities on the site or not.
\ No newline at end of file
diff --git a/resources/assets/js/bootstrap.js b/resources/assets/js/bootstrap.js
deleted file mode 100644
index 4e8b958..0000000
--- a/resources/assets/js/bootstrap.js
+++ /dev/null
@@ -1,45 +0,0 @@
-
-window._ = require('lodash');
-
-/**
- * We'll load jQuery and the Bootstrap jQuery plugin which provides support
- * for JavaScript based Bootstrap features such as modals and tabs. This
- * code may be modified to fit the specific needs of your application.
- */
-
-window.$ = window.jQuery = require('jquery');
-
-require('bootstrap-sass');
-
-/**
- * Vue is a modern JavaScript library for building interactive web interfaces
- * using reactive data binding and reusable components. Vue's API is clean
- * and simple, leaving you to focus on building your next great project.
- */
-
-window.Vue = require('vue');
-
-/**
- * We'll load the axios HTTP library which allows us to easily issue requests
- * to our Laravel back-end. This library automatically handles sending the
- * CSRF token as a header based on the value of the "XSRF" token cookie.
- */
-
-window.axios = require('axios');
-
-window.axios.defaults.headers.common = {
-    'X-Requested-With': 'XMLHttpRequest'
-};
-
-/**
- * Echo exposes an expressive API for subscribing to channels and listening
- * for events that are broadcast by Laravel. Echo and event broadcasting
- * allows your team to easily build robust real-time web applications.
- */
-
-// import Echo from "laravel-echo"
-
-// window.Echo = new Echo({
-//     broadcaster: 'pusher',
-//     key: 'your-pusher-key'
-// });
diff --git a/resources/assets/js/start.js b/resources/assets/js/start.js
deleted file mode 100644
index 1bcb1c7..0000000
--- a/resources/assets/js/start.js
+++ /dev/null
@@ -1,202 +0,0 @@
-require('./bootstrap');
-
-var app = new Vue({
-    el: '#app',
-    data: {
-        show: {
-            load: true,
-            form: null,
-            singleReport: null,
-            fullReport: null
-        },
-        loadingMessage: "",
-
-        singleRequest: {
-            url: ''
-        },
-
-        singleReport: {
-            siteRating: '',
-        },
-
-        fullReport: {
-            fullRating: '',
-            ratings: {},
-            amountUrlsTotal: '-',
-            amountGeneratedReports: '-'
-        },
-
-        multipleRequest: {
-            urls: ''
-        },
-
-        crawlRequest: {
-            url : '',
-            whitelist: '',
-            scan : {
-                anchor: true,
-                image: false,
-                script: false,
-                link: false,
-                media: false,
-                area: false,
-                frame: false,
-                custom: false,
-                customJson: ""
-            },
-            expertMode: false,
-            proxy: false,
-            proxyAdress: '',
-            ignoreTLS: true,
-
-            downloadLinksUrl : '',
-            amountUrlsCrawled : '-',
-            amountUrlsToCrawl : '-',
-            crawledLinks: ''
-        }
-    },
-
-    mounted() {
-        axios.get('/jsConfig').then(response => [
-            app.crawlRequest.proxyAdress = "http://" + response.data.HOST_IP + ":8080",
-            app.crawlRequest.limit = response.data.LIMIT,
-            app.show.load = false,
-            app.show.form = true,
-        ]);
-    },
-    methods: {
-        getSingleReport() {
-            app.show.load = true;
-            app.show.form = false;
-            this.loadingMessage = "Requesting your report... just a moment, pls."
-            axios
-                .get("/api/v1/rate?url=" + this.singleRequest.url)
-                .then(response => [
-                    app.singleReport = response.data,
-                    app.show.load = false,
-                    app.show.singleReport = true
-                ])
-                .catch(error => [
-                    alert(error),
-                ]) ;
-        },
-        getMultipleReport(runWithCrawledLinks = false) {
-            app.loadingMessage = "We're dispatching your request to the backend.<br>This should take just a moment.";
-            app.show.form = false;
-            app.show.load = true;
-
-            axios
-                .post('/api/v1/multiple', {
-                    urls: runWithCrawledLinks ? app.crawlRequest.crawledLinks : app.multipleRequest.urls.split('\n')
-                })
-                .then(response => [
-                    app.fullReport.reportUrl = response.data.reportUrl,
-                    app.loadingMessage = "",
-                    app.getReportDetails()
-                ])
-                .catch(error => [
-                   alert(error)
-                ]);
-        },
-        getCrawledReport() {
-            app.loadingMessage = "We're dispatching your request to the backend.<br>This should take just a moment.";
-            app.show.form = false;
-            app.show.load = true;
-
-            axios
-                .post('/api/v1/crawl', {
-                    url: app.crawlRequest.url,
-
-                    whitelist: app.crawlRequest.whitelist ? app.crawlRequest.whitelist.split('\n') : null,
-
-                    anchor: app.crawlRequest.scan.anchor,
-                    image: app.crawlRequest.scan.image,
-                    media: app.crawlRequest.scan.media,
-                    link: app.crawlRequest.scan.link,
-                    script: app.crawlRequest.scan.script,
-                    area: app.crawlRequest.scan.area,
-                    frame: app.crawlRequest.scan.frame,
-
-                    ignoreTlsErrors: app.crawlRequest.expertMode ? app.crawlRequest.ignoreTLS : false,
-                    customElements: (app.crawlRequest.expertMode && app.crawlRequest.custom) ? app.crawlRequest.scan.customJson : null,
-                    proxy: (app.crawlRequest.expertMode && app.crawlRequest.proxy) ? app.crawlRequest.proxyAdress : null,
-                    limit: app.crawlRequest.limit
-                })
-                .then(response => [
-                    app.loadingMessage = "Crawler job was successfully dispatched.",
-                    app.crawlRequest.downloadLinksUrl = response.data.linksUrl,
-                    app.getCrawledLinks()
-                ])
-                .catch(error => [
-                    alert(error)
-                ]);
-        },
-
-        getCrawledLinks() {
-            axios
-                .get(app.crawlRequest.downloadLinksUrl)
-                .then(function(response){
-                    app.dispatchReportWithCrawledLinksOrRelaod(response);
-                });
-        },
-
-        dispatchReportWithCrawledLinksOrRelaod(response) {
-            if (response.data.status.localeCompare("crawlerFinished") === 0) {
-                app.loadingMessage = "Crawler has finished.<br>In the next step the report will be generated.";
-                app.crawlRequest.crawledLinks = response.data.links;
-                app.getMultipleReport(true);
-            }
-            else {
-                app.crawlRequest.amountUrlsCrawled = response.data.amountUrlsCrawled;
-                app.crawlRequest.amountUrlsToCrawl = response.data.amountUrlsToCrawl;
-                app.loadingMessage = "Crawled Urls: "
-                    + ((app.crawlRequest.amountUrlsCrawled !== null) ? app.crawlRequest.amountUrlsCrawled : '-')
-                    + "<br>"
-                    + "Not crawled yet: "
-                    + (app.crawlRequest.amountUrlsToCrawl !== null ? app.crawlRequest.amountUrlsToCrawl : '-')
-                    + "<br>"
-                    + "Limit: " + app.crawlRequest.limit;
-                setTimeout(app.getCrawledLinks, 3000);
-            }
-        },
-
-        getReportDetails() {
-            axios.get(app.fullReport.reportUrl).then(function(response){
-                app.displayReportOrReload(response);
-            });
-        },
-
-        displayReportOrReload(response) {
-            if (response.data.status.localeCompare("finished") === 0) {
-                app.show.load = false;
-                app.show.fullReport = true;
-
-                app.fullReport = response.data.fullReport;
-                app.fullReport.amountUrlsTotal = response.data.amountUrlsTotal;
-                app.fullReport.amountGeneratedReports = response.data.amountGeneratedReports;
-            }
-            else {
-                app.fullReport.amountUrlsTotal = response.data.amountUrlsTotal;
-                app.fullReport.amountGeneratedReports = response.data.amountGeneratedReports;
-                app.loadingMessage = "Generating reports: "
-                    + (app.fullReport.amountGeneratedReports !== null ? app.fullReport.amountGeneratedReports : '-')
-                    + " of "
-                    + (app.fullReport.amountUrlsTotal !== null ? app.fullReport.amountUrlsTotal : '-');
-                setTimeout(app.getReportDetails, 3000);
-            }
-        },
-        getFirst(someString) {
-            return someString.charAt(0);
-        },
-        nl2br(someString) {
-            return (someString + '').replace(/\\n/g, "<br>");
-        },
-        newScan() {
-            app.show.load = false;
-            app.show.singleReport = false;
-            app.show.fullReport = false;
-            app.show.form = true;
-        }
-
-    }
-});
diff --git a/resources/assets/sass/_variables.scss b/resources/assets/sass/_variables.scss
deleted file mode 100644
index cce4558..0000000
--- a/resources/assets/sass/_variables.scss
+++ /dev/null
@@ -1,37 +0,0 @@
-
-// Body
-$body-bg: #f5f8fa;
-
-// Borders
-$laravel-border-color: darken($body-bg, 10%);
-$list-group-border: $laravel-border-color;
-$navbar-default-border: $laravel-border-color;
-$panel-default-border: $laravel-border-color;
-$panel-inner-border: $laravel-border-color;
-
-// Brands
-$brand-primary: #3097D1;
-$brand-info: #8eb4cb;
-$brand-success: #2ab27b;
-$brand-warning: #cbb956;
-$brand-danger:  #bf5329;
-
-// Typography
-$font-family-sans-serif: "Raleway", sans-serif;
-$font-size-base: 14px;
-$line-height-base: 1.6;
-$text-color: #636b6f;
-
-// Navbar
-$navbar-default-bg: #fff;
-
-// Buttons
-$btn-default-color: $text-color;
-
-// Inputs
-$input-border: lighten($text-color, 40%);
-$input-border-focus: lighten($brand-primary, 25%);
-$input-color-placeholder: lighten($text-color, 30%);
-
-// Panels
-$panel-default-heading-bg: #fff;
diff --git a/resources/assets/sass/app.scss b/resources/assets/sass/app.scss
deleted file mode 100644
index d8d3958..0000000
--- a/resources/assets/sass/app.scss
+++ /dev/null
@@ -1,194 +0,0 @@
-
-// Fonts
-@import url(https://fonts.googleapis.com/css?family=Raleway:300,400,600);
-
-// Variables
-@import "variables";
-
-// Bootstrap
-@import "node_modules/bootstrap-sass/assets/stylesheets/bootstrap";
-@import "node_modules/animate.css/animate";
-
-.vertical-center {
-  display: flex;
-  align-items: center;
-  justify-content: center;
-}
-
-.full-height {
-  min-height: 100vh;
-}
-
-.full-width {
-  width: 100%;
-}
-
-.row {
-  margin-top: 10px;
-}
-.scan-elements div.col-md-3 {
-  margin-top: 10px;
-}
-
-.toggleExpertMode {
-  cursor: pointer;
-  margin-top: 30px;
-}
-
-.divider{
-  position: relative;
-  width: 100%;
-  height: 1px;
-  background: #ddd;
-  margin: 30px auto;
-}
-.divider:after{
-  content: 'OR';
-  width: 30px;
-  height: 30px;
-  line-height: 30px;
-  border-radius: 15px;
-  font-size: 12px;
-  color: #666;
-  background: #fff;
-  border:1px solid #f0f0f0;
-  display: block;
-  position: absolute;
-  top: 50%;
-  left: 50%;
-  margin-top: -15px;
-  margin-left: -15px;
-  text-align: center;
-}
-
-.crawl-scan {
-  margin-bottom: 50px;
-}
-
-.panel-group {
-  margin-top: 30px;
-}
-
-.panel-title a {
-  position: absolute;
-  left: 75px;
-}
-
-.rating {
-  border: 1px dashed gray;
-  display: flex;
-  align-items: center;
-  margin: 30px auto;
-
-  table {
-    margin: 0;
-  }
-}
-
-.tag-list {
-  margin: 0;
-  padding: 0;
-
-  li {
-    display: inline-block;
-    margin: auto 5px;
-  }
-}
-
-.report-label {
-  font-size: 25pt;
-  width: 100px;
-  height: 100px;
-  display: flex;
-  justify-content: center;
-  align-items: center;
-}
-
-// Loading animation
-.sk-folding-cube {
-    margin: 20px auto;
-    width: 40px;
-    height: 40px;
-    position: relative;
-    -webkit-transform: rotateZ(45deg);
-    transform: rotateZ(45deg);
-}
-
-.sk-folding-cube .sk-cube {
-    float: left;
-    width: 50%;
-    height: 50%;
-    position: relative;
-    -webkit-transform: scale(1.1);
-    -ms-transform: scale(1.1);
-    transform: scale(1.1);
-}
-.sk-folding-cube .sk-cube:before {
-    content: '';
-    position: absolute;
-    top: 0;
-    left: 0;
-    width: 100%;
-    height: 100%;
-    background-color: #E53F32;
-    -webkit-animation: sk-foldCubeAngle 2.4s infinite linear both;
-    animation: sk-foldCubeAngle 2.4s infinite linear both;
-    -webkit-transform-origin: 100% 100%;
-    -ms-transform-origin: 100% 100%;
-    transform-origin: 100% 100%;
-}
-.sk-folding-cube .sk-cube2 {
-    -webkit-transform: scale(1.1) rotateZ(90deg);
-    transform: scale(1.1) rotateZ(90deg);
-}
-.sk-folding-cube .sk-cube3 {
-    -webkit-transform: scale(1.1) rotateZ(180deg);
-    transform: scale(1.1) rotateZ(180deg);
-}
-.sk-folding-cube .sk-cube4 {
-    -webkit-transform: scale(1.1) rotateZ(270deg);
-    transform: scale(1.1) rotateZ(270deg);
-}
-.sk-folding-cube .sk-cube2:before {
-    -webkit-animation-delay: 0.3s;
-    animation-delay: 0.3s;
-}
-.sk-folding-cube .sk-cube3:before {
-    -webkit-animation-delay: 0.6s;
-    animation-delay: 0.6s;
-}
-.sk-folding-cube .sk-cube4:before {
-    -webkit-animation-delay: 0.9s;
-    animation-delay: 0.9s;
-}
-@-webkit-keyframes sk-foldCubeAngle {
-    0%, 10% {
-        -webkit-transform: perspective(140px) rotateX(-180deg);
-        transform: perspective(140px) rotateX(-180deg);
-        opacity: 0;
-    } 25%, 75% {
-          -webkit-transform: perspective(140px) rotateX(0deg);
-          transform: perspective(140px) rotateX(0deg);
-          opacity: 1;
-      } 90%, 100% {
-            -webkit-transform: perspective(140px) rotateY(180deg);
-            transform: perspective(140px) rotateY(180deg);
-            opacity: 0;
-        }
-}
-
-@keyframes sk-foldCubeAngle {
-    0%, 10% {
-        -webkit-transform: perspective(140px) rotateX(-180deg);
-        transform: perspective(140px) rotateX(-180deg);
-        opacity: 0;
-    } 25%, 75% {
-          -webkit-transform: perspective(140px) rotateX(0deg);
-          transform: perspective(140px) rotateX(0deg);
-          opacity: 1;
-      } 90%, 100% {
-            -webkit-transform: perspective(140px) rotateY(180deg);
-            transform: perspective(140px) rotateY(180deg);
-            opacity: 0;
-        }
-}
diff --git a/resources/lang/de.json b/resources/lang/de.json
deleted file mode 100644
index b3b5d38..0000000
--- a/resources/lang/de.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
-  "There are possible HTTP header misconfigurations.": "Es gibt mögliche HTTP-Header-Fehlkonfigurationen.",
-  "This site is secure." : "Diese Seite ist sicher.",
-  "This site is highly secure." : "Diese Seite ist sehr sicher.",
-
-  "The header is not set." : "Der Header ist nicht gesetzt.",
-  "The header is set multiple times." : "Der Header ist mehrmals gesetzt.",
-
-  "The header is set without the charset." : "Der Header wurde ohne Zeichensatzangabe gesetzt.",
-  "The header is set with the charset." : "Der Header wurde mit einer Zeichensatzangabe gesetzt.",
-  "The header is set with the charset and follows the best practice.": "Der Header wurde mit einer Zeichensatzangabe gesetzt und folgt den Empfehlungen.",
-  "The given charset is wrong and thereby ineffective." : "Der angegebene Zeichensatz ist fehlerhaft und dadurch unwirksam.",
-  "The correct writing is: charset=utf-8" : "Die korrekte Schreibweise ist: charset=utf-8",
-  "Best practice is: charset=utf-8" : "Die Empfehlung ist: charset=utf-8",
-
-  "The header contains \"unsafe-inline\" or \"unsafe-eval\" directives." : "Der Header enthält \"unsafe-inline\" oder \"unsafe-eval\" Direktiven.",
-  "The header is free of any \"unsafe-\" directives." : "Der Header ist frei von \"unsafe-\"-Direktiven.",
-  "The header is \"unsafe-\" free and includes \"default-src 'none'\"" : "Der Header ist frei von \"unsafe-\"-Direktiven und hat \"default-src 'none'\" gesetzt.",
-  "The legacy header \"X-Content-Security-Policy\" (that is only used for IE11 with CSP v.1) is set. The new and standardized header is Content-Security-Policy." : "Der veraltete Header X-Content-Security-Policy (nur vom IE11 mit CSP v.1 genutzt) ist gesetzt. Der neue und standardisierte Header ist \"Content-Security-Policy\"",
-
-  "The keys are pinned for less than 15 days." : "Die Schlüssel sind für weniger als 15 Tage gepinnt.",
-  "The keys are pinned for more than 15 days." : "Die Schlüssel sind fpr mehr als 15 Tage gepinnt.",
-  "An error occured while checking \"max-age\"." : "Ein Fehler trat während der Überprüfung von \"max-age\" auf.",
-  "A report-uri is set." : "Eine report-uri ist gesetzt.",
-  "\"includeSubDomains\" is set." : "\"includeSubDomains\" ist gesetzt.",
-  "\"preload\" is set." : "\"preload\" ist gesetzt.",
-  "\"mode=block\" is activated." : "\"mode=block\" ist aktiviert.",
-
-  "The value for \"max-age\" is smaller than 6 months." : "Der Wert für \"max-age\" ist kleiner als 6 Monate.",
-  "The value for \"max-age\" is greater than 6 months." : "Der Wert für \"max-age\" ist  größer als 6 Monate.",
-
-  "The header is not set correctly." : "Der Header ist nicht korrekt gesetzt.",
-  "The header is set correctly." : "Der Header ist korrekt gesetzt.",
-
-  "The header is set and does not contain any wildcard." : "Der Header ist gesetzt und enthält keine Wildcards",
-  "The header contains wildcards and is thereby useless." : "Der Header enthält Wildcards und ist dadurch unwirksam."
-
-}
\ No newline at end of file
diff --git a/resources/lang/en/auth.php b/resources/lang/en/auth.php
index e5506df..6ef1a73 100644
--- a/resources/lang/en/auth.php
+++ b/resources/lang/en/auth.php
@@ -13,7 +13,7 @@
     |
     */
 
-    'failed' => 'These credentials do not match our records.',
+    'failed'   => 'These credentials do not match our records.',
     'throttle' => 'Too many login attempts. Please try again in :seconds seconds.',
 
 ];
diff --git a/resources/lang/en/passwords.php b/resources/lang/en/passwords.php
index e5544d2..ffa19ba 100644
--- a/resources/lang/en/passwords.php
+++ b/resources/lang/en/passwords.php
@@ -14,9 +14,9 @@
     */
 
     'password' => 'Passwords must be at least six characters and match the confirmation.',
-    'reset' => 'Your password has been reset!',
-    'sent' => 'We have e-mailed your password reset link!',
-    'token' => 'This password reset token is invalid.',
-    'user' => "We can't find a user with that e-mail address.",
+    'reset'    => 'Your password has been reset!',
+    'sent'     => 'We have e-mailed your password reset link!',
+    'token'    => 'This password reset token is invalid.',
+    'user'     => "We can't find a user with that e-mail address.",
 
 ];
diff --git a/resources/views/start.blade.php b/resources/views/start.blade.php
deleted file mode 100644
index 7ce131e..0000000
--- a/resources/views/start.blade.php
+++ /dev/null
@@ -1,332 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-    <meta charset="utf-8">
-    <title>HTTP Secure Header Scanner</title>
-    <link rel="stylesheet" href="{{ mix('/css/app.css') }}">
-</head>
-<body>
-
-<div class="container vertical-center full-height" id="app">
-
-    {{-- Loading animation --}}
-    <div v-show="show.load">
-        <div class="wrapper">
-            <div class="sk-folding-cube">
-                <div class="sk-cube1 sk-cube"></div>
-                <div class="sk-cube2 sk-cube"></div>
-                <div class="sk-cube4 sk-cube"></div>
-                <div class="sk-cube3 sk-cube"></div>
-            </div>
-            <br>
-            <p class="text-muted text-center" v-html="loadingMessage"></p>
-        </div>
-    </div>
-
-    {{-- Form --}}
-    <div class="full-width" :class="{ 'hidden': show.form === null, 'animated zoomIn': show.form, 'animated zoomOut hidden': !show.form }">
-        <div class="col-md-12">
-            <h1>HTTP Secure Header Scanner</h1>
-            <hr>
-            <h3>Select your preferred mode:</h3>
-            <ul class="nav nav-pills">
-                <li class="active"><a data-toggle="pill" href="#single">Single URL Scan</a></li>
-                <li><a data-toggle="pill" href="#multiple">Multiple URL Scan</a></li>
-                <li><a data-toggle="pill" href="#crawler">Multiple URL Scan via Crawler</a></li>
-            </ul>
-
-            <div class="tab-content">
-                <div id="single" class="tab-pane fade in active">
-                    <h3>Enter your URL</h3>
-                    <div class="row">
-                        <div class="col-md-10">
-                            <input class="form-control" placeholder="https://yoururl.com" v-model="singleRequest.url">
-                        </div>
-                        <div class="col-md-2">
-                            <button class="btn btn-primary form-control" @click="getSingleReport()">Scan</button>
-                        </div>
-                    </div>
-                </div>
-
-                <div id="multiple" class="tab-pane fade">
-                    <h3>Enter your list of URLs to check</h3>
-                    <div class="row vertical-center">
-                        <div class="col-sm-10">
-                            <textarea class="form-control" rows="5" placeholder="Insert each URL in a seperated line." v-model="multipleRequest.urls"></textarea>
-                        </div>
-                        <div class="col-sm-2">
-                            <button class="btn btn-primary form-control" @click="getMultipleReport()">Scan</button>
-                        </div>
-                    </div>
-                </div>
-
-                <div id="crawler" class="tab-pane fade">
-                    <h3>Configure your crawler settings</h3>
-                    <div class="row vertical-center">
-                        <div class="col-sm-12">
-                            <div class="row">
-                                <div class="col-sm-12">
-                                    <label>Enter a URL to start</label>
-                                    <input class="form-control" placeholder="https://yoururl.com" v-model="crawlRequest.url">
-                                </div>
-                            </div>
-                            <div class="row">
-                                <div class="col-sm-6">
-                                    <strong>Whitelist</strong><br>
-                                    <textarea class="form-control" rows="5" placeholder="Insert each URL in a seperated line." v-model="crawlRequest.whitelist"></textarea>
-                                </div>
-                                <div class="col-sm-6">
-                                    <div class="row scan-elements">
-                                        <div class="col-sm-4 col-md-3">
-                                            <strong>Anchor-Tags</strong><br>
-                                            <div class="btn-group btn-toggle">
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.anchor = true" :class="{'btn-primary active': crawlRequest.scan.anchor, 'btn-default': !crawlRequest.scan.anchor }">ON</button>
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.anchor = false" :class="{'btn-primary active': !crawlRequest.scan.anchor, 'btn-default': crawlRequest.scan.anchor }">OFF</button>
-                                            </div>
-                                        </div>
-                                        <div class="col-sm-4 col-md-3">
-                                            <strong>Image-Tags</strong><br>
-                                            <div class="btn-group btn-toggle">
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.image = true" :class="{'btn-primary active': crawlRequest.scan.image, 'btn-default': !crawlRequest.scan.image }">ON</button>
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.image = false" :class="{'btn-primary active': !crawlRequest.scan.image, 'btn-default': crawlRequest.scan.image }">OFF</button>
-                                            </div>
-                                        </div>
-                                        <div class="col-sm-4 col-md-3">
-                                            <strong>Script-Tags</strong><br>
-                                            <div class="btn-group btn-toggle">
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.script = true" :class="{'btn-primary active': crawlRequest.scan.script, 'btn-default': !crawlRequest.scan.script }">ON</button>
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.script = false" :class="{'btn-primary active': !crawlRequest.scan.script, 'btn-default': crawlRequest.scan.script }">OFF</button>
-                                            </div>
-                                        </div>
-                                        <div class="col-sm-4 col-md-3">
-                                            <strong>Link-Tags</strong><br>
-                                            <div class="btn-group btn-toggle">
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.link = true" :class="{'btn-primary active': crawlRequest.scan.link, 'btn-default': !crawlRequest.scan.link }">ON</button>
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.link = false" :class="{'btn-primary active': !crawlRequest.scan.link, 'btn-default': crawlRequest.scan.link }">OFF</button>
-                                            </div>
-                                        </div>
-                                        <div class="col-sm-4 col-md-3">
-                                            <strong>Media-Tags</strong><br>
-                                            <div class="btn-group btn-toggle">
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.media = true" :class="{'btn-primary active': crawlRequest.scan.media, 'btn-default': !crawlRequest.scan.media }">ON</button>
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.media = false" :class="{'btn-primary active': !crawlRequest.scan.media, 'btn-default': crawlRequest.scan.media }">OFF</button>
-                                            </div>
-                                        </div>
-                                        <div class="col-sm-4 col-md-3">
-                                            <strong>Area-Tags</strong><br>
-                                            <div class="btn-group btn-toggle">
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.area = true" :class="{'btn-primary active': crawlRequest.scan.area, 'btn-default': !crawlRequest.scan.area }">ON</button>
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.area = false" :class="{'btn-primary active': !crawlRequest.scan.area, 'btn-default': crawlRequest.scan.area }">OFF</button>
-                                            </div>
-                                        </div>
-                                        <div class="col-sm-4 col-md-3">
-                                            <strong>Frame-Tags</strong><br>
-                                            <div class="btn-group btn-toggle">
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.frame = true" :class="{'btn-primary active': crawlRequest.scan.frame, 'btn-default': !crawlRequest.scan.frame }">ON</button>
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.frame = false" :class="{'btn-primary active': !crawlRequest.scan.frame, 'btn-default': crawlRequest.scan.frame }">OFF</button>
-                                            </div>
-                                        </div>
-                                    </div>
-                                </div>
-                            </div>
-                            <div class="row" :class="{ 'hidden': !crawlRequest.expertMode }">
-                                <div class="col-sm-12">
-                                    <div class="row">
-                                        <div class="col-sm-6">
-                                            <div class="row">
-                                                <div class="col-sm-4">
-                                                    <strong>Proxy</strong><br>
-                                                    <div class="btn-group btn-toggle">
-                                                        <button class="btn btn-sm" @click="crawlRequest.proxy = true" :class="{'btn-primary active': crawlRequest.proxy, 'btn-default': !crawlRequest.proxy }">ON</button>
-                                                        <button class="btn btn-sm" @click="crawlRequest.proxy = false" :class="{'btn-primary active': !crawlRequest.proxy, 'btn-default': crawlRequest.proxy }">OFF</button>
-                                                    </div>
-                                                </div>
-                                                <div class="col-sm-8">
-                                                    <div :class="{ 'hidden': !crawlRequest.proxy }">
-                                                        <strong>Proxy adress</strong>
-                                                        <input class="form-control" placeholder="https://yourProxy.com:8080" v-model="crawlRequest.proxyAdress">
-                                                    </div>
-                                                </div>
-                                            </div>
-                                        </div>
-                                        <div class="col-sm-6">
-                                            <div class="row">
-                                                <div class="col-sm-4">
-                                                    <strong>TLS-Errors</strong><br>
-                                                    <div class="btn-group btn-toggle">
-                                                        <button class="btn btn-sm" @click="crawlRequest.ignoreTLS = false" :class="{'btn-primary active': !crawlRequest.ignoreTLS, 'btn-default': crawlRequest.ignoreTLS }">ON</button>
-                                                        <button class="btn btn-sm" @click="crawlRequest.ignoreTLS = true" :class="{'btn-primary active': crawlRequest.ignoreTLS, 'btn-default': !crawlRequest.ignoreTLS }">OFF</button>
-                                                    </div>
-                                                </div>
-                                                <div class="col-sm-6">
-                                                    <strong>Limit</strong><br>
-                                                    <input class="form-control" placeholder="Limit to crawl" v-model="crawlRequest.limit">
-                                                </div>
-                                            </div>
-                                        </div>
-                                    </div>
-                                    <div class="row">
-                                        <div class="col-sm-2">
-                                            <strong>Custom</strong><br>
-                                            <div class="btn-group btn-toggle">
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.custom = true" :class="{'btn-primary active': crawlRequest.scan.custom, 'btn-default': !crawlRequest.scan.custom }">ON</button>
-                                                <button class="btn btn-sm" @click="crawlRequest.scan.custom = false" :class="{'btn-primary active': !crawlRequest.scan.custom, 'btn-default': crawlRequest.scan.custom }">OFF</button>
-                                            </div>
-                                        </div>
-                                        <div class="col-sm-4">
-                                            <div :class="{ 'hidden': !crawlRequest.scan.custom}">
-                                                <strong>Custom JSON</strong><br>
-                                                <textarea class="form-control" rows="5" placeholder="Valid JSON" v-model="crawlRequest.scan.customJson"></textarea>
-                                            </div>
-                                        </div>
-                                    </div>
-                                </div>
-                            </div>
-
-                            <div class="row crawl-scan">
-                                <div class="col-sm-12">
-                                    <div>
-                                        <p class="text-info text-center toggleExpertMode" @click="crawlRequest.expertMode = true" :class="{ 'hidden': crawlRequest.expertMode }">
-                                            <i class="glyphicon glyphicon-cog"></i> Enable Expert-Mode
-                                        </p>
-                                        <p class="text-danger text-center toggleExpertMode" @click="crawlRequest.expertMode = false" :class="{ 'hidden': !crawlRequest.expertMode }">
-                                            <i class="glyphicon glyphicon-cog"></i> Disable Expert-Mode
-                                        </p>
-                                        <div class="divider"></div>
-                                    </div>
-                                    <button class="btn btn-primary form-control" @click="getCrawledReport()">Crawl &amp; Scan</button>
-                                </div>
-                            </div>
-                        </div>
-                    </div>
-                </div>
-            </div>
-        </div>
-    </div>
-
-    {{-- Single singleReport --}}
-    <div :class="{ 'hidden': show.singleReport === null, 'animated zoomIn': show.singleReport, 'animated zoomOut hidden': !show.singleReport }">
-        <div class="col-md-12">
-            <span @click="newScan()" class="btn btn-default">New scan</span>
-            <hr>
-            <h2>HTTP Secure Header Checker - Your result</h2>
-            <div class="row rating">
-                <div class="col-md-2">
-                    <span class="label report-label" :class="{ 'label-success': getFirst(singleReport.siteRating) == 'A', 'label-warning': getFirst(singleReport.siteRating) == 'B', 'label-danger': getFirst(singleReport.siteRating) == 'C'}">@{{ singleReport.siteRating }}</span>
-                </div>
-                <div class="col-md-10">
-                    <table class="table table-striped">
-                        <tr>
-                            <th>Scanned:</th>
-                            <td><a :href="singleReport.url" target="_blank">@{{ singleReport.url }}</a></td>
-                        </tr>
-                        <tr>
-                            <th>Comment:</th>
-                            <td>@{{ singleReport.comment }}</td>
-                        </tr>
-                        <tr>
-                            <th><nobr>Rated headers:</nobr></th>
-                            <td>
-                                <ul class="tag-list">
-                                    <li class="label label-info" v-for="(value, header) in singleReport.header">@{{ header }}</li>
-                                </ul>
-                            </td>
-                        </tr>
-                    </table>
-                </div>
-            </div>
-            <div class="panel panel-default" v-for="(value, header) in singleReport.header">
-                <div class="panel-heading" role="tab" :id="'heading' + header">
-                    <h4 class="panel-title">
-                        <span class="label label-default" :class="{ 'label-success': getFirst(value.rating) == 'A', 'label-warning': getFirst(value.rating) == 'B', 'label-danger': getFirst(value.rating) == 'C'}">@{{ value.rating }}</span>
-                        <a role="button" data-toggle="collapse" data-parent="#accordion" :href="'#collapse' + header" aria-expanded="false" :aria-controls="'collapse' + header">
-                            @{{ header }}
-                        </a>
-                    </h4>
-                </div>
-                <div :id="'collapse' + header" class="panel-collapse collapse" role="tabpanel" :aria-labelledby="'heading' + header">
-                    <div class="panel-body">
-
-                        <table class="table table-hover">
-                            <tr>
-                                <th>Comment</th>
-                                <td v-html="nl2br(value.comment)"></td>
-                            </tr>
-                            <tr>
-                                <th>Best practice</th>
-                                <td>@{{ value.bestPractice }}</td>
-                            </tr>
-                            <tr v-if="value.plain">
-                                <th>Returned value</th>
-                                <td><code>@{{ value.plain[0] }}</code></td>
-                            </tr>
-                        </table>
-
-                        <p>@{{ value.description }}</p>
-
-                    </div>
-                </div>
-            </div>
-        </div>
-    </div>
-
-    {{-- FullReport --}}
-    <div :class="{ 'hidden': show.fullReport === null, 'animated zoomIn': show.fullReport, 'animated zoomOut hidden': !show.fullReport }">
-        <div class="col-md-12">
-            <span @click="newScan()" class="btn btn-default">New scan</span>
-            <hr>
-            <h2>HTTP Secure Header Checker - Your result</h2>
-            <div class="row rating">
-                <div class="col-md-2">
-                    <span class="label report-label" :class="{ 'label-success': getFirst(fullReport.fullRating) == 'A', 'label-warning': getFirst(fullReport.fullRating) == 'B', 'label-danger': getFirst(fullReport.fullRating) == 'C'}">@{{ fullReport.fullRating }}</span>
-                </div>
-                <div class="col-md-10">
-                    <table class="table table-striped">
-                        <tr>
-                            <th><nobr>URLs scanned</nobr></th>
-                            <td>@{{ fullReport.amountGeneratedReports }} of @{{ fullReport.amountUrlsTotal }}</td>
-                        </tr>
-                        <tr>
-                            <th><nobr>Rated headers:</nobr></th>
-                            <td>
-                                <ul class="tag-list">
-                                    <li class="label label-info" v-for="(value, header) in fullReport.header">@{{ header }}</li>
-                                </ul>
-                            </td>
-                        </tr>
-
-                    </table>
-                </div>
-            </div>
-            <div class="panel panel-default" v-for="(value, header) in fullReport.header">
-                <div class="panel-heading" role="tab" :id="'headingMultiple' + header">
-                    <h4 class="panel-title">
-                        <span class="label label-default" :class="{ 'label-success': getFirst(fullReport.worstHeaderRatings[header]) == 'A', 'label-warning': getFirst(fullReport.worstHeaderRatings[header]) == 'B', 'label-danger': getFirst(fullReport.worstHeaderRatings[header]) == 'C'}">@{{ fullReport.worstHeaderRatings[header] }}</span>
-                        <a role="button" data-toggle="collapse" :href="'#collapseMultiple' + header" aria-expanded="false" :aria-controls="'collapseMultiple' + header">
-                            @{{ header }}
-                        </a>
-                    </h4>
-                </div>
-                <div :id="'collapseMultiple' + header" class="panel-collapse collapse" role="tabpanel" :aria-labelledby="'headingMultiple' + header">
-                    <div class="panel-body">
-
-                        <table class="table table-hover">
-                            <tr>
-                                <th>Rating</th>
-                                <th>Url</th>
-                            </tr>
-                            <tr v-for="entry in value">
-                                <td><span class="label label-default" :class="{ 'label-success': getFirst(entry.rating) == 'A', 'label-warning': getFirst(entry.rating) == 'B', 'label-danger': getFirst(entry.rating) == 'C'}">@{{ entry.rating }}</span></td>
-                                <td>@{{ entry.url }}</td>
-                            </tr>
-                        </table>
-
-                    </div>
-                </div>
-            </div>
-        </div>
-    </div>
-</div>
-<script src="{{ mix('/js/start.js') }}"></script>
-</body>
-</html>
diff --git a/routes/api.php b/routes/api.php
index 4dcd96a..11ce13a 100644
--- a/routes/api.php
+++ b/routes/api.php
@@ -1,6 +1,5 @@
 <?php
 
-use Illuminate\Http\Request;
 
 /*
 |--------------------------------------------------------------------------
@@ -14,6 +13,6 @@
 */
 
 Route::group(['prefix' => 'v1'], function () {
-    Route::get('/header', 'ApiController@headerReport');
-    Route::get('/domxss', 'ApiController@domxssReport');
-});
\ No newline at end of file
+    Route::post('/header', 'ApiController@headerReport');
+    Route::post('/domxss', 'ApiController@domxssReport');
+});
diff --git a/routes/web.php b/routes/web.php
index bf483b3..b3d9bbc 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -1,5 +1 @@
 <?php
-
-Route::get('/', function (){
-   return "API only! Please check the readme for the correct routes.";
-});
\ No newline at end of file
diff --git a/server.php b/server.php
index 5fb6379..20bc389 100644
--- a/server.php
+++ b/server.php
@@ -1,12 +1,10 @@
 <?php
 
 /**
- * Laravel - A PHP Framework For Web Artisans
+ * Laravel - A PHP Framework For Web Artisans.
  *
- * @package  Laravel
  * @author   Taylor Otwell <taylor@laravel.com>
  */
-
 $uri = urldecode(
     parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH)
 );
diff --git a/storage/framework/cache/.gitignore b/storage/framework/cache/.gitignore
index d6b7ef3..01e4a6c 100644
--- a/storage/framework/cache/.gitignore
+++ b/storage/framework/cache/.gitignore
@@ -1,2 +1,3 @@
 *
+!data/
 !.gitignore
diff --git a/storage/framework/cache/data/.gitignore b/storage/framework/cache/data/.gitignore
new file mode 100644
index 0000000..d6b7ef3
--- /dev/null
+++ b/storage/framework/cache/data/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore
diff --git a/tests/CreatesApplication.php b/tests/CreatesApplication.php
index 547152f..c9479c7 100644
--- a/tests/CreatesApplication.php
+++ b/tests/CreatesApplication.php
@@ -2,6 +2,10 @@
 
 namespace Tests;
 
+use App\Http\Requests\ScanStartRequest;
+use GuzzleHttp\Client;
+use GuzzleHttp\Handler\MockHandler;
+use GuzzleHttp\HandlerStack;
 use Illuminate\Contracts\Console\Kernel;
 
 trait CreatesApplication
@@ -19,4 +23,25 @@ public function createApplication()
 
         return $app;
     }
+
+    public function setUp()
+    {
+        $this->request = new ScanStartRequest(['url' => 'https://testdomain']);
+        parent::setUp();
+    }
+
+    /**
+     * This method sets and activates the GuzzleHttp Mocking functionality.
+     *
+     * @param array $responses
+     *
+     * @return Client
+     */
+    protected function getMockedGuzzleClient(array $responses)
+    {
+        $mock = new MockHandler($responses);
+        $handler = HandlerStack::create($mock);
+
+        return new Client(['handler' => $handler]);
+    }
 }
diff --git a/tests/Feature/DomxssScanTest.php b/tests/Feature/DomxssScanTest.php
new file mode 100644
index 0000000..86355e8
--- /dev/null
+++ b/tests/Feature/DomxssScanTest.php
@@ -0,0 +1,28 @@
+<?php
+
+namespace Tests\Feature;
+
+use Tests\TestCase;
+
+class DomxssScanTest extends TestCase
+{
+    /** @test */
+    public function if_there_is_an_http_error_the_correct_formatted_error_message_will_be_send()
+    {
+        $response = $this->json('POST', '/api/v1/domxss', [
+            'url' => 'https://url-but-not-available.info',
+        ]);
+
+        $response->assertStatus(200);
+        $response->assertJson([
+            'name'         => 'DOMXSS',
+            'hasError'     => true,
+            'errorMessage' => [
+                'translationStringId' => 'NO_HTTP_RESPONSE',
+                'placeholders' => [],
+            ],
+            'score' => 0,
+            'tests' => [],
+        ]);
+    }
+}
diff --git a/tests/Feature/HeaderScanTest.php b/tests/Feature/HeaderScanTest.php
new file mode 100644
index 0000000..3c8e4cf
--- /dev/null
+++ b/tests/Feature/HeaderScanTest.php
@@ -0,0 +1,28 @@
+<?php
+
+namespace Tests\Feature;
+
+use Tests\TestCase;
+
+class HeaderScanTest extends TestCase
+{
+    /** @test */
+    public function if_there_is_an_http_error_the_correct_formatted_error_message_will_be_send()
+    {
+        $response = $this->json('POST', '/api/v1/header', [
+            'url' => 'https://url-but-not-available.info',
+        ]);
+
+        $response->assertStatus(200);
+        $response->assertJson([
+            'name'         => 'HEADER',
+            'hasError'     => true,
+            'errorMessage' => [
+                'translationStringId' => 'NO_HTTP_RESPONSE',
+                'placeholders' => [],
+            ],
+            'score' => 0,
+            'tests' => [],
+        ]);
+    }
+}
diff --git a/tests/Feature/ScanStartTest.php b/tests/Feature/ScanStartTest.php
new file mode 100644
index 0000000..563e6b7
--- /dev/null
+++ b/tests/Feature/ScanStartTest.php
@@ -0,0 +1,141 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Jobs\DomxssScanJob;
+use App\Jobs\HeaderScanJob;
+use Illuminate\Support\Facades\Log;
+use Illuminate\Support\Facades\Queue;
+use Tests\TestCase;
+use TiMacDonald\Log\LogFake;
+
+class ScanStartTest extends TestCase
+{
+    public function setUp()
+    {
+        parent::setUp();
+        Log::swap(new LogFake());
+    }
+
+    /** @test */
+    public function a_header_scan_can_be_started_if_the_url_is_given()
+    {
+        $response = $this->json('POST', '/api/v1/header', [
+            'url'          => 'https://testdomain.test',
+        ]);
+
+        Log::assertLogged('info', function ($message, $context) {
+            return $message === 'Scanning the following URL: https://testdomain.test';
+        });
+
+        $response->assertStatus(200);
+    }
+
+    /** @test */
+    public function a_headerScanJob_can_be_dispatched_if_the_callbackurl_parameter_is_given()
+    {
+        Queue::fake();
+
+        $response = $this->json('POST', '/api/v1/header', [
+            'url'          => 'https://testdomain.test',
+            'dangerLevel'  => 0,
+            'callbackurls' => ['http://localhost:9002'],
+        ]);
+
+        Queue::assertPushed(HeaderScanJob::class, 1);
+    }
+
+    /** @test */
+    public function a_domxss_scan_can_be_started_if_the_url_is_given()
+    {
+        $response = $this->json('POST', '/api/v1/domxss', [
+            'url'          => 'https://testdomain.test',
+        ]);
+
+        Log::assertLogged('info', function ($message, $context) {
+            return $message === 'Scanning the following URL: https://testdomain.test';
+        });
+
+        $response->assertStatus(200);
+    }
+
+    /** @test */
+    public function a_domxssScanJob_can_be_dispatched_if_the_callbackurl_parameter_is_given()
+    {
+        Queue::fake();
+
+        $response = $this->json('POST', '/api/v1/domxss', [
+            'url'          => 'https://testdomain.test',
+            'dangerLevel'  => 0,
+            'callbackurls' => ['http://localhost:9002'],
+        ]);
+
+        Queue::assertPushed(DomxssScanJob::class, 1);
+    }
+
+    /** @test */
+    public function a_scan_can_not_be_started_if_no_parameters_are_sent()
+    {
+        $response = $this->json('POST', '/api/v1/header', []);
+        $response->assertStatus(422);
+
+        Log::assertNotLogged('info', function ($message, $context) {
+            return str_contains($message, 'Scanning the following URL: ');
+        });
+
+        $response = $this->json('POST', '/api/v1/domxss', []);
+        $response->assertStatus(422);
+
+        Log::assertNotLogged('info', function ($message, $context) {
+            return str_contains($message, 'Scanning the following URL: ');
+        });
+    }
+
+    /** @test */
+    public function a_scan_can_not_be_started_if_invalid_parameters_are_sent()
+    {
+        $response = $this->json('POST', '/api/v1/header', [
+            'url'          => 3,
+            'dangerLevel'  => 0,
+            'callbackurls' => ['http://localhost:9002'],
+        ]);
+        $response->assertStatus(422);
+
+        Log::assertNotLogged('info', function ($message, $context) {
+            return $message === 'Scanning the following URL: https://testdomain.test';
+        });
+
+        $response = $this->json('POST', '/api/v1/domxss', [
+            'url'          => 'https://testdomain.test',
+            'dangerLevel'  => 100,
+            'callbackurls' => ['http://localhost:9002'],
+        ]);
+        $response->assertStatus(422);
+
+        Log::assertNotLogged('info', function ($message, $context) {
+            return $message === 'Scanning the following URL: https://testdomain.test';
+        });
+    }
+
+    /** @test */
+    public function a_domain_with_umlauts_can_be_scanned()
+    {
+        $response = $this->json('POST', '/api/v1/header', [
+            'url'          => 'https://hää.de',
+        ]);
+
+        Log::assertLogged('info', function ($message, $context) {
+            return $message === 'Scanning the following URL: https://xn--h-0faa.de';
+        });
+
+        $response = $this->json('POST', '/api/v1/domxss', [
+            'url'          => 'https://hää.de',
+            'dangerLevel'  => 0,
+            'callbackurls' => ['http://localhost:9002'],
+        ]);
+
+        Log::assertLogged('info', function ($message, $context) {
+            return $message === 'Scanning the following URL: https://xn--h-0faa.de';
+        });
+    }
+}
diff --git a/tests/Unit/CSPParserTest.php b/tests/Unit/CSPParserTest.php
new file mode 100644
index 0000000..d5ec321
--- /dev/null
+++ b/tests/Unit/CSPParserTest.php
@@ -0,0 +1,129 @@
+<?php
+
+namespace Tests\Unit;
+
+use App\CSPParser;
+use Tests\TestCase;
+
+class CSPParserTest extends TestCase
+{
+    /** @test */
+    public function cspParser_accepts_a_complete_header_definition()
+    {
+        $header = "Content-Security-Policy: default-src 'none'; script-src 'self'";
+
+        $csp = new CSPParser($header);
+
+        $this->assertEquals($csp->headerName, 'Content-Security-Policy');
+        $this->assertEquals($csp->originalDirectivesString, "default-src 'none'; script-src 'self'");
+        $this->assertFalse($csp->hasLegacyHeader);
+    }
+
+    /** @test */
+    public function cspParser_accepts_a_complete_legacy_header_definition()
+    {
+        $header = "X-Content-Security-Policy: default-src 'none'; script-src 'self'";
+
+        $csp = new CSPParser($header);
+
+        $this->assertEquals($csp->headerName, 'X-Content-Security-Policy');
+        $this->assertEquals($csp->originalDirectivesString, "default-src 'none'; script-src 'self'");
+        $this->assertTrue($csp->hasLegacyHeader);
+    }
+
+    /** @test */
+    public function cspParser_gets_the_correct_amount_of_directives()
+    {
+        $header = "Content-Security-Policy: default-src 'none'; script-src 'self'   ; font-src 'none'";
+
+        $csp = new CSPParser($header);
+
+        $this->assertEquals(3, count($csp->directives));
+    }
+
+    /** @test */
+    public function cspParser_gets_the_correct_amount_of_directives_and_ignores_valid_whitespace()
+    {
+        $header = "Content-Security-Policy:        default-src  'none';      script-src   'self';       font-src   'none'  ";
+
+        $csp = new CSPParser($header);
+
+        $this->assertEquals(3, count($csp->directives));
+    }
+
+    /** @test */
+    public function cspParser_returns_a_correct_directives_collection()
+    {
+        $header = "Content-Security-Policy: default-src 'none'; script-src 'self'; font-src 'self' *.gstatic.com data:";
+
+        $csp = new CSPParser($header);
+
+        $this->assertEquals(collect(["'none'"]), $csp->directives->get('default-src'));
+        $this->assertEquals(collect(["'self'"]), $csp->directives->get('script-src'));
+        $this->assertEquals(collect(["'self'", '*.gstatic.com', 'data:']), $csp->directives->get('font-src'));
+    }
+
+    /** @test */
+    public function cspParser_returns_a_correct_directives_collection_and_ignores_whitespace()
+    {
+        $header = "Content-Security-Policy: default-src     'none'  ; script-src     'self'   ; font-src 'self'   *.gstatic.com data:   ";
+
+        $csp = new CSPParser($header);
+
+        $this->assertEquals(collect(["'none'"]), $csp->directives->get('default-src'));
+        $this->assertEquals(collect(["'self'"]), $csp->directives->get('script-src'));
+        $this->assertEquals(collect(["'self'", '*.gstatic.com', 'data:']), $csp->directives->get('font-src'));
+    }
+
+    /** @test */
+    public function cspParser_checks_for_invalid_directives()
+    {
+        $header = "Content-Security-Policy: default-src 'none'; script-src 'self'; font-src 'self' *.gstatic.com data:";
+        $csp = new CSPParser($header);
+        $this->assertTrue($csp->isValid());
+
+        $header = "Content-Security-Policy: #default-src 'none'; script-src 'self'; font-src 'self' *.gstatic.com data:";
+        $csp = new CSPParser($header);
+        $this->assertFalse($csp->isValid());
+    }
+
+    /** @test */
+    public function cspParser_checks_for_invalid_values()
+    {
+        $headers = [
+            // Non-ASCII-character
+            "Content-Security-Policy: default-src 'none'; script-src Электронные словари",
+            // Comma
+            "Content-Security-Policy: default-src 'none'; script-src hallo,welt.de",
+        ];
+
+        foreach ($headers as $header) {
+            $csp = new CSPParser($header);
+            $this->assertFalse($csp->isValid());
+        }
+    }
+
+    /** @test */
+    public function cspParser_allows_nonces()
+    {
+        $header = "Content-Security-Policy: script-src 'self' 'nonce-b8c1HAq0yLmcbxTyRUb+pZlRX8U='";
+        $csp = new CSPParser($header);
+        $this->assertTrue($csp->isValid());
+    }
+
+    /** @test */
+    public function cspParser_allows_hashes()
+    {
+        $header = "Content-Security-Policy: script-src 'sha256-gPMJwWBMWDx0Cm7ZygJKZIU2vZpiYvzUQjl5Rh37hKs='";
+        $csp = new CSPParser($header);
+        $this->assertTrue($csp->isValid());
+    }
+
+    /** @test */
+    public function cspParser_does_not_mark_valid_csp_as_invalid_caused_by_valueDirectives_like_blockAllMixedContent()
+    {
+        $csp = new CSPParser("default-src 'self'; img-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'; block-all-mixed-content; report-uri https://example.org/reports/report; report-to default");
+
+        $this->assertTrue($csp->isValid());
+    }
+}
diff --git a/tests/Unit/DOMXSSCheckTest.php b/tests/Unit/DOMXSSCheckTest.php
new file mode 100644
index 0000000..2736fb4
--- /dev/null
+++ b/tests/Unit/DOMXSSCheckTest.php
@@ -0,0 +1,25 @@
+<?php
+
+namespace Tests\Unit;
+
+use App\DOMXSSCheck;
+use Tests\TestCase;
+
+class DOMXSSCheckTest extends TestCase
+{
+    /** @test */
+    public function domxssCheckFindsSinks()
+    {
+        $sampleBody = file_get_contents(base_path().'/tests/Unit/hradek.test.html');
+
+        $this->assertTrue(DOMXSSCheck::hasSinks($sampleBody));
+    }
+
+    /** @test */
+    public function domxssCheckFindsSources()
+    {
+        $sampleBody = file_get_contents(base_path().'/tests/Unit/hradek.test.html');
+
+        $this->assertTrue(DOMXSSCheck::hasSources($sampleBody));
+    }
+}
diff --git a/tests/Unit/HTTPResponseTest.php b/tests/Unit/HTTPResponseTest.php
index 3b619f5..6e75ac6 100644
--- a/tests/Unit/HTTPResponseTest.php
+++ b/tests/Unit/HTTPResponseTest.php
@@ -3,12 +3,8 @@
 namespace Tests\Unit;
 
 use App\HTTPResponse;
-use GuzzleHttp\Client;
-use GuzzleHttp\Handler\MockHandler;
-use GuzzleHttp\HandlerStack;
 use GuzzleHttp\Psr7\Response;
 use Mockery;
-
 use Tests\TestCase;
 
 class HTTPResponseTest extends TestCase
@@ -20,13 +16,14 @@ public function tearDown()
     }
 
     /** @test */
-    public function a_http_response_has_an_url()
-    {
-        $response = $this->getMockedHTTPResponse([
-            new Response(200),
-        ]);
-        $this->assertEquals("http://testdomain", $response->url());
-    }
+    // public function a_http_response_has_an_url()
+    // {
+    //     $response = $this->getMockedHTTPResponse([
+    //         new Response(200),
+    //     ]);
+
+    //     $this->assertEquals('http://testdomain', $response->url());
+    // }
 
     /** @test */
     public function a_custom_mock_handler_can_be_used_within_the_HTTPResponse_class()
@@ -47,8 +44,8 @@ public function the_http_client_follow_redirects()
            ]),
            new Response(200, [
                'Strict-Transport-Security' => 'max-age=60; includeSubDomains',
-               'X-Content-Type-Options' => 'nosniff',
-           ])
+               'X-Content-Type-Options'    => 'nosniff',
+           ]),
        ]);
 
         $this->assertEquals(200, $response->statusCode());
@@ -60,12 +57,12 @@ public function the_HTTPResponse_class_returns_the_correct_headers()
         $response = $this->getMockedHTTPResponse([
             new Response(200, [
                 'Strict-Transport-Security' => 'max-age=60; includeSubDomains',
-            ])
+            ]),
         ]);
 
-        $header = $response->header("strict-transport-security");
+        $header = $response->header('strict-transport-security');
         $this->assertCount(1, $header);
-        $this->assertEquals("max-age=60; includeSubDomains", $header[0]);
+        $this->assertEquals('max-age=60; includeSubDomains', $header[0]);
     }
 
     /** @test */
@@ -77,22 +74,22 @@ public function the_HTTPResponse_class_returns_the_correct_headers_case_insensit
             new Response(200, ['x-xss-protection' => '1; mode=block']),
         ]);
 
-        $header = $response->header("X-XSS-PROTECTION");
-        $this->assertEquals("1; mode=block", $header[0]);
+        $header = $response->header('X-XSS-PROTECTION');
+        $this->assertEquals('1; mode=block', $header[0]);
 
-        $header = $response->header("X-Xss-Protection");
-        $this->assertEquals("1; mode=block", $header[0]);
+        $header = $response->header('X-Xss-Protection');
+        $this->assertEquals('1; mode=block', $header[0]);
 
-        $header = $response->header("x-xss-protection");
-        $this->assertEquals("1; mode=block", $header[0]);
+        $header = $response->header('x-xss-protection');
+        $this->assertEquals('1; mode=block', $header[0]);
     }
 
     /** @test */
     public function the_HTTPResponse_class_delivers_the_correct_site_body()
     {
-        $sampleBody = file_get_contents(base_path() . "/tests/Unit/example.org.html");
+        $sampleBody = file_get_contents(base_path().'/tests/Unit/example.org.html');
         $response = $this->getMockedHTTPResponse([
-            new Response(200, ['X-XSS-PROTECTION' => '1; mode=block'], $sampleBody)
+            new Response(200, ['X-XSS-PROTECTION' => '1; mode=block'], $sampleBody),
         ]);
 
         $this->assertEquals($sampleBody, $response->body());
@@ -101,10 +98,10 @@ public function the_HTTPResponse_class_delivers_the_correct_site_body()
     /** @test */
     public function the_HTTPResponse_class_delivers_the_correct_site_body_after_a_redirect()
     {
-        $sampleBody = file_get_contents(base_path() . "/tests/Unit/example.org.html");
+        $sampleBody = file_get_contents(base_path().'/tests/Unit/example.org.html');
         $response = $this->getMockedHTTPResponse([
             new Response(301, ['Location' => 'http://followMe']),
-            new Response(200, ['X-XSS-PROTECTION' => '1; mode=block'], $sampleBody)
+            new Response(200, ['X-XSS-PROTECTION' => '1; mode=block'], $sampleBody),
         ]);
 
         $this->assertEquals($sampleBody, $response->body());
@@ -112,15 +109,13 @@ public function the_HTTPResponse_class_delivers_the_correct_site_body_after_a_re
 
     /**
      * This method sets and activates the GuzzleHttp Mocking functionality.
+     *
      * @param array $responses
+     *
      * @return HTTPResponse
      */
     protected function getMockedHTTPResponse(array $responses)
     {
-        $mock = new MockHandler($responses);
-        $handler = HandlerStack::create($mock);
-        $client = new Client(["handler" => $handler]) ;
-
-        return new HTTPResponse("http://testdomain", $client);
+        return new HTTPResponse($this->request, $this->getMockedGuzzleClient($responses));
     }
 }
diff --git a/tests/Unit/Ratings/CSPRatingTest.php b/tests/Unit/Ratings/CSPRatingTest.php
index 85ecbec..cd6cfdb 100644
--- a/tests/Unit/Ratings/CSPRatingTest.php
+++ b/tests/Unit/Ratings/CSPRatingTest.php
@@ -2,10 +2,8 @@
 
 namespace Tests\Unit;
 
+use App\HTTPResponse;
 use App\Ratings\CSPRating;
-use GuzzleHttp\Client;
-use GuzzleHttp\Handler\MockHandler;
-use GuzzleHttp\HandlerStack;
 use GuzzleHttp\Psr7\Response;
 use Tests\TestCase;
 
@@ -14,105 +12,164 @@
  * TODO: Improve parsing and rating of CSP.
  *
  * Class CSPRatingTest
- * @package Tests\Unit
  */
 class CSPRatingTest extends TestCase
 {
     /** @test */
-    public function cspRating_rates_c_because_header_is_not_set()
+    public function cspRating_rates_0_because_header_is_not_set()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200),
         ]);
-        $rating = new CSPRating("http://testdomain", $client);
-
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals('The header is not set.', $rating->getComment());
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new CSPRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $expected = [
+            'translationStringId' => 'HEADER_NOT_SET',
+            'placeholders' => null,
+        ];
+        $this->assertEquals($expected, $rating->errorMessage);
     }
 
     /** @test */
-    public function cspRating_rates_c_because_header_is_set_with_unsafe_inline()
+    public function cspRating_rates_50_because_header_is_set_with_unsafe_inline()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                "Content-Security-Policy" => "default-src 'none'; script-src 'unsafe-inline'; object-src 'none';",
+                'Content-Security-Policy' => "default-src 'none'; script-src 'unsafe-inline'; object-src 'none';",
             ]),
         ]);
-        $rating = new CSPRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new CSPRating($response);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals('The header contains "unsafe-inline" or "unsafe-eval" directives.', $rating->getComment());
+        $this->assertEquals(50, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('CSP_UNSAFE_INCLUDED'));
     }
 
     /** @test */
-    public function cspRating_rates_c_because_header_is_set_with_unsafe_eval()
+    public function cspRating_rates_50_because_header_is_set_with_unsafe_eval()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                "Content-Security-Policy" => "default-src 'none'; script-src 'unsafe-eval'; object-src 'none';",
+                'Content-Security-Policy' => "default-src 'none'; script-src 'unsafe-eval'; object-src 'none';",
             ]),
         ]);
-        $rating = new CSPRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new CSPRating($response);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals('The header contains "unsafe-inline" or "unsafe-eval" directives.', $rating->getComment());
+        $this->assertEquals(50, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('CSP_UNSAFE_INCLUDED'));
     }
 
     /** @test */
-    public function cspRating_rates_b_because_header_is_set_without_unsafes_but_without_default_src_none()
+    public function cspRating_rates_0_because_header_is_set_without_unsafes_but_without_default_src()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                "Content-Security-Policy" => "default-src 'self';",
+                'Content-Security-Policy' => "img-src 'self';",
             ]),
         ]);
-        $rating = new CSPRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new CSPRating($response);
 
-        $this->assertEquals("B", $rating->getRating());
-        $this->assertEquals('The header is free of any "unsafe-" directives.', $rating->getComment());
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('CSP_DEFAULT_SRC_MISSING'));
     }
 
     /** @test */
-    public function cspRating_rates_a_because_header_is_set_without_unsafes_and_with_default_src_none()
+    public function cspRating_rates_100_because_header_is_set_without_unsafes_and_with_default_src_none()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                "Content-Security-Policy" => "default-src 'none';",
+                'Content-Security-Policy' => "default-src 'none';",
             ]),
         ]);
-        $rating = new CSPRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new CSPRating($response);
 
-        $this->assertEquals("A", $rating->getRating());
-        $this->assertEquals('The header is "unsafe-" free and includes "default-src \'none\'"', $rating->getComment());
+        $this->assertEquals(100, $rating->score);
     }
 
-    // TODO: Rates with C because of wildcards in script-src, object-src or default-src
-    // TODO: default-src *
-    // TODO: default-src 'none'; script-src *;
-
     /** @test */
     public function cspRating_adds_comment_for_legacy_header()
+    {
+        // X-Content-Security-Policy
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['X-Content-Security-Policy' => "default-src 'none';"]),
+            new Response(200, ['X-WebKit-CSP' => "default-src 'none';"]),
+            new Response(200, ['X-Content-Security-Policy' => "default-src 'none';", 'X-WebKit-CSP' => "default-src 'none';"]),
+        ]);
+        // Finds only X-Content-Security-Policy
+        $rating = new CSPRating(new HTTPResponse($this->request, $client));
+        $this->assertTrue($rating->testDetails->flatten()->contains('CSP_LEGACY_HEADER_SET'));
+
+        // Finds only X-WebKit-CSP
+        $rating = new CSPRating(new HTTPResponse($this->request, $client));
+        $this->assertTrue($rating->testDetails->flatten()->contains('CSP_LEGACY_HEADER_SET'));
+
+        // Finds both legacy headers.
+        $rating = new CSPRating(new HTTPResponse($this->request, $client));
+        $this->assertTrue($rating->testDetails->contains(['translationStringId' => 'CSP_LEGACY_HEADER_SET', 'placeholders' => ['HEADER_NAME' => 'X-Content-Security-Policy']]));
+        $this->assertTrue($rating->testDetails->contains(['translationStringId' => 'CSP_LEGACY_HEADER_SET', 'placeholders' => ['HEADER_NAME' => 'X-WebKit-CSP']]));
+    }
+
+    /** @test */
+    public function cspRating_can_handle_whitespaces()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                "X-Content-Security-Policy" => "default-src 'none';",
+                'Content-Security-Policy' => "default-src   'none';",
             ]),
         ]);
-        $rating = new CSPRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new CSPRating($response);
 
-        $this->assertStringEndsWith("The legacy header \"X-Content-Security-Policy\" (that is only used for IE11 with CSP v.1) is set. The new and standardized header is Content-Security-Policy.", $rating->getComment());
+        $this->assertEquals(100, $rating->score);
     }
 
+    /** @test */
+    public function CSPRating_detects_wrong_encoding()
+    {
+        $client = $this->getMockedGuzzleClient([
+            // Producing an encoding error
+            new Response(200, ['Content-Security-Policy' => zlib_encode('SGVsbG8gV29ybGQ=', ZLIB_ENCODING_RAW)]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new CSPRating($response);
 
-    /**
-     * This method sets and activates the GuzzleHttp Mocking functionality.
-     * @param array $responses
-     * @return Client
-     */
-    protected function getMockedGuzzleClient(array $responses)
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('HEADER_ENCODING_ERROR'));
+        $this->assertTrue($rating->hasError);
+    }
+
+    /** @test */
+    public function cspRating_rates_100_because_header_is_set_without_unsafes_and_with_default_src_self()
     {
-        $mock = new MockHandler($responses);
-        $handler = HandlerStack::create($mock);
-        return (new Client(["handler" => $handler])) ;
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [
+                'Content-Security-Policy' => "default-src 'self';",
+            ]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new CSPRating($response);
+
+        $this->assertEquals(100, $rating->score);
+    }
+
+    /** @test */
+    public function cspRating_rates_0_if_the_policy_is_not_valid()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [
+                'Content-Security-Policy' => "#default-src 'self'; font-src 'self'",
+            ]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new CSPRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('CSP_IS_NOT_VALID'));
+        $this->assertTrue($rating->hasError);
     }
 }
diff --git a/tests/Unit/Ratings/ContentTypeRatingTest.php b/tests/Unit/Ratings/ContentTypeRatingTest.php
index b44d595..8b60316 100644
--- a/tests/Unit/Ratings/ContentTypeRatingTest.php
+++ b/tests/Unit/Ratings/ContentTypeRatingTest.php
@@ -2,99 +2,198 @@
 
 namespace Tests\Unit;
 
+use App\HTTPResponse;
 use App\Ratings\ContentTypeRating;
-use GuzzleHttp\Client;
-use GuzzleHttp\Handler\MockHandler;
-use GuzzleHttp\HandlerStack;
 use GuzzleHttp\Psr7\Response;
 use Tests\TestCase;
 
 class ContentTypeRatingTest extends TestCase
 {
     /** @test */
-    public function contentTypeRating_rates_c_for_a_missing_header()
+    public function contentTypeRating_rates_0_for_a_missing_header()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200),
         ]);
-        $rating = new ContentTypeRating("http://testdomain", $client);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals("The header is not set.", $rating->getComment());
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $expected = [
+            'translationStringId' => 'HEADER_NOT_SET',
+            'placeholders' => null,
+        ];
+        $this->assertEquals($expected, $rating->errorMessage);
     }
 
     /** @test */
-    public function contentTypeRating_rates_c_when_the_charset_is_missing()
+    public function contentTypeRating_rates_0_when_the_charset_is_missing()
     {
         $client = $this->getMockedGuzzleClient([
-            new Response(200, [ "Content-Type" => "text/html" ]),
+            new Response(200, ['Content-Type' => 'text/html']),
         ]);
-        $rating = new ContentTypeRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals("The header is set without the charset.", $rating->getComment());
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating)->contains('CT_HEADER_WITHOUT_CHARSET'));
     }
 
     /** @test */
-    public function contentTypeRating_rates_c_when_a_wrong_charset_definition_is_given_see_HASEGAWA()
+    public function contentTypeRating_rates_0_when_a_wrong_charset_definition_is_given_see_HASEGAWA()
     {
         $client = $this->getMockedGuzzleClient([
-            new Response(200, [ "Content-Type" => "text/html; charset=utf8" ]),
-            new Response(200, [ "Content-Type" => "text/html; charset=Windows-31J" ]),
-            new Response(200, [ "Content-Type" => "text/html; charset=CP932" ]),
-            new Response(200, [ "Content-Type" => "text/html; charset=MS932" ]),
-            new Response(200, [ "Content-Type" => "text/html; charset=MS942C" ]),
-            new Response(200, [ "Content-Type" => "text/html; charset=sjis" ]),
-            new Response(200, [ "Content-Type" => "text/html; charset=jis" ]),
+            new Response(200, ['Content-Type' => 'text/html; charset=utf8']),
+            new Response(200, ['Content-Type' => 'text/html; charset=Windows-31J']),
+            new Response(200, ['Content-Type' => 'text/html; charset=CP932']),
+            new Response(200, ['Content-Type' => 'text/html; charset=MS932']),
+            new Response(200, ['Content-Type' => 'text/html; charset=MS942C']),
+            new Response(200, ['Content-Type' => 'text/html; charset=sjis']),
+            new Response(200, ['Content-Type' => 'text/html; charset=jis']),
         ]);
 
         for ($i = 1; $i <= 7; $i++) {
-            $rating = new ContentTypeRating("http://testdomain", $client);
+            $response = new HTTPResponse($this->request, $client);
+            $rating = new ContentTypeRating($response);
 
-            $this->assertEquals("C", $rating->getRating());
-            $this->assertStringStartsWith("The given charset is wrong and thereby ineffective.", $rating->getComment());
+            $this->assertEquals(0, $rating->score);
+            $this->assertTrue(collect($rating)->contains('CT_WRONG_CHARSET'));
         }
     }
 
     /** @test */
-    public function contentTypeRating_rates_a_when_the_charset_is_utf_8()
+    public function contentTypeRating_rates_100_when_the_charset_is_utf_8()
     {
         $client = $this->getMockedGuzzleClient([
-            new Response(200, [ "Content-Type" => "text/html; charset=utf-8" ]),
-            new Response(200, [ "Content-Type" => "text/html; charset=UTF-8" ]),
+            new Response(200, ['Content-Type' => 'text/html; charset=utf-8']),
+            new Response(200, ['Content-Type' => 'text/html; charset=UTF-8']),
         ]);
 
-        for ($i = 1; $i <= 2; $i++) {
-            $rating = new ContentTypeRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
 
-            $this->assertEquals("A", $rating->getRating());
-            $this->assertEquals("The header is set with the charset and follows the best practice.", $rating->getComment());
+        for ($i = 1; $i <= 2; $i++) {
+            $this->assertEquals(100, $rating->score);
         }
     }
 
     /** @test */
     public function if_the_header_is_not_set_the_meta_tag_is_rated()
     {
-        $sampleBody = file_get_contents(base_path() . "/tests/Unit/example.org.html");
+        $sampleBody = file_get_contents(base_path() . '/tests/Unit/example.org.html');
+
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [], $sampleBody),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
+
+        $this->assertEquals(60, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('CT_META_TAG_SET_CORRECT'));
+    }
+
+    /** @test */
+    public function if_the_header_is_set_the_meta_tag_is_not_rated()
+    {
+        $sampleBody = file_get_contents(base_path() . '/tests/Unit/example.org.html');
+
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Content-Type' => 'text/html; charset=utf-8'], $sampleBody),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
+
+        $this->assertEquals(100, $rating->score);
+        $this->assertFalse(collect($rating->testDetails)->flatten()->contains('CT_META_TAG_SET_CORRECT'));
+    }
+
+    /** @test */
+    public function ContentTypeRating_rates_30_if_only_the_meta_tag_is_set_but_without_an_charset()
+    {
+        $sampleBody = '
+            <html><head><meta http-equiv="Content-Type" content="text/html" /></head><body></body></html>
+        ';
+
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [], $sampleBody),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
+
+        $this->assertEquals(30, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('CT_META_TAG_SET'));
+    }
+
+    /** @test */
+    public function ContentTypeRating_rates_60_if_only_the_meta_tag_is_set_but_with_the_correct_charset()
+    {
+        $sampleBody = '
+            <html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body></body></html>
+        ';
+
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [], $sampleBody),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
+
+        $this->assertEquals(60, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('CT_META_TAG_SET_CORRECT'));
+    }
+
+    /** @test */
+    public function ContentTypeRating_rates_30_if_only_the_short_meta_tag_is_set_but_with_another_charset()
+    {
+        $sampleBody = '
+            <html><head><meta charset="ISO-8859-1" /></head><body></body></html>
+        ';
 
         $client = $this->getMockedGuzzleClient([
-            new Response(200, [ ], $sampleBody)
+            new Response(200, [], $sampleBody),
         ]);
 
-        $rating = new ContentTypeRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
 
-        $this->assertEquals("B", $rating->getRating());
+        $this->assertEquals(30, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('CT_META_TAG_SET'));
     }
 
-    /**
-     * This method sets and activates the GuzzleHttp Mocking functionality.
-     * @param array $responses
-     * @return Client
-     */
-    protected function getMockedGuzzleClient(array $responses)
+    /** @test */
+    public function ContentTypeRating_rates_60_if_only_the_short_meta_tag_is_set_but_with_the_correct_charset()
     {
-        $mock = new MockHandler($responses);
-        $handler = HandlerStack::create($mock);
-        return (new Client(["handler" => $handler])) ;
+        $sampleBody = '
+            <html><head><meta charset="UTF-8" /></head><body></body></html>
+        ';
+
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [], $sampleBody),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
+
+        $this->assertEquals(60, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('CT_META_TAG_SET_CORRECT'));
+    }
+
+    /** @test */
+    public function ContentTypeRating_detects_wrong_encoding()
+    {
+        $client = $this->getMockedGuzzleClient([
+            // Producing an encoding error
+            new Response(200, ['Content-Type' => zlib_encode('SGVsbG8gV29ybGQ=', ZLIB_ENCODING_RAW)]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ContentTypeRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('HEADER_ENCODING_ERROR'));
+        $this->assertTrue($rating->hasError);
     }
 }
diff --git a/tests/Unit/Ratings/HPKPRatingTest.php b/tests/Unit/Ratings/HPKPRatingTest.php
index 87d2689..331a1f7 100644
--- a/tests/Unit/Ratings/HPKPRatingTest.php
+++ b/tests/Unit/Ratings/HPKPRatingTest.php
@@ -2,92 +2,70 @@
 
 namespace Tests\Unit;
 
+use App\HTTPResponse;
 use App\Ratings\HPKPRating;
-use GuzzleHttp\Client;
-use GuzzleHttp\Handler\MockHandler;
-use GuzzleHttp\HandlerStack;
 use GuzzleHttp\Psr7\Response;
 use Tests\TestCase;
 
 class HPKPRatingTest extends TestCase
 {
     /** @test */
-    public function hpkpRating_rates_c_for_a_missing_header()
+    public function hpkpRating_rates_0_for_a_missing_header()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200),
         ]);
-        $rating = new HPKPRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HPKPRating($response);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals("The header is not set.", $rating->getComment());
+        $this->assertEquals(0, $rating->score);
+        $expected = [
+            'translationStringId' => 'HEADER_NOT_SET',
+            'placeholders' => null,
+        ];
+        $this->assertEquals($expected, $rating->errorMessage);
     }
 
     /** @test */
-    public function hpkpRating_rates_b_for_a_short_max_age()
+    public function hpkpRating_rates_includeSubDomains()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                'Public-Key-Pins' => 'max-age=100000; pin-sha256="E9CZ9INDbd+2eRQozYqqbQ2yXLVKB9+xcprMF+44U1g="; pin-sha256="LPJNul+wow4m6DsqxbninhsWHlwfp0JecwQzYpOLmCQ=";'
+                'Public-Key-Pins' => 'max-age=1000000; pin-sha256="E9CZ9INDbd+2eRQozYqqbQ2yXLVKB9+xcprMF+44U1g="; pin-sha256="LPJNul+wow4m6DsqxbninhsWHlwfp0JecwQzYpOLmCQ="; includeSubDomains',
             ]),
         ]);
-        $rating = new HPKPRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HPKPRating($response);
 
-        $this->assertEquals("B", $rating->getRating());
-        $this->assertEquals('The keys are pinned for less than 15 days.', $rating->getComment());
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('INCLUDE_SUBDOMAINS'));
     }
 
     /** @test */
-    public function hpkpRating_rates_a_for_a_good_max_age()
+    public function hpkpRating_rates_report_uri()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                'Public-Key-Pins' => 'max-age=1500000; pin-sha256="E9CZ9INDbd+2eRQozYqqbQ2yXLVKB9+xcprMF+44U1g="; pin-sha256="LPJNul+wow4m6DsqxbninhsWHlwfp0JecwQzYpOLmCQ=";'
+                'Public-Key-Pins' => 'max-age=1000000; pin-sha256="E9CZ9INDbd+2eRQozYqqbQ2yXLVKB9+xcprMF+44U1g="; pin-sha256="LPJNul+wow4m6DsqxbninhsWHlwfp0JecwQzYpOLmCQ="; report-uri="http://example.com/pkp-report";',
             ]),
         ]);
-        $rating = new HPKPRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HPKPRating($response);
 
-        $this->assertEquals("A", $rating->getRating());
-        $this->assertEquals('The keys are pinned for more than 15 days.', $rating->getComment());
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('HPKP_REPORT_URI'));
     }
 
     /** @test */
-    public function hpkpRating_rates_x_plus_for_includeSubDomains()
+    public function HPKPRating_detects_wrong_encoding()
     {
         $client = $this->getMockedGuzzleClient([
-            new Response(200, [
-                'Public-Key-Pins' => 'max-age=1000000; pin-sha256="E9CZ9INDbd+2eRQozYqqbQ2yXLVKB9+xcprMF+44U1g="; pin-sha256="LPJNul+wow4m6DsqxbninhsWHlwfp0JecwQzYpOLmCQ="; includeSubDomains'
-            ]),
-        ]);
-        $rating = new HPKPRating("http://testdomain", $client);
-
-        $this->assertStringEndsWith("+", $rating->getRating());
-        $this->assertStringEndsWith('"includeSubDomains" is set.', $rating->getComment());
-    }
-
-    /** @test */
-    public function hpkpRating_rates_x_plus_for_report_uri()
-    {
-        $client = $this->getMockedGuzzleClient([
-            new Response(200, [
-                'Public-Key-Pins' => 'max-age=1000000; pin-sha256="E9CZ9INDbd+2eRQozYqqbQ2yXLVKB9+xcprMF+44U1g="; pin-sha256="LPJNul+wow4m6DsqxbninhsWHlwfp0JecwQzYpOLmCQ="; report-uri="http://example.com/pkp-report";'
-            ]),
+            // Producing an encoding error
+            new Response(200, ['Public-Key-Pins' => zlib_encode('SGVsbG8gV29ybGQ=', ZLIB_ENCODING_RAW)]),
         ]);
-        $rating = new HPKPRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HPKPRating($response);
 
-        $this->assertStringEndsWith("+", $rating->getRating());
-        $this->assertStringEndsWith('A report-uri is set.', $rating->getComment());
-    }
-
-    /**
-     * This method sets and activates the GuzzleHttp Mocking functionality.
-     * @param array $responses
-     * @return Client
-     */
-    protected function getMockedGuzzleClient(array $responses)
-    {
-        $mock = new MockHandler($responses);
-        $handler = HandlerStack::create($mock);
-        return (new Client(["handler" => $handler])) ;
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('HEADER_ENCODING_ERROR'));
+        $this->assertTrue($rating->hasError);
     }
 }
diff --git a/tests/Unit/Ratings/HSTSRatingTest.php b/tests/Unit/Ratings/HSTSRatingTest.php
index ac70c9a..ad24a14 100644
--- a/tests/Unit/Ratings/HSTSRatingTest.php
+++ b/tests/Unit/Ratings/HSTSRatingTest.php
@@ -2,25 +2,29 @@
 
 namespace Tests\Unit;
 
+use App\HTTPResponse;
 use App\Ratings\HSTSRating;
-use GuzzleHttp\Client;
-use GuzzleHttp\Handler\MockHandler;
-use GuzzleHttp\HandlerStack;
 use GuzzleHttp\Psr7\Response;
 use Tests\TestCase;
 
 class HSTSRatingTest extends TestCase
 {
     /** @test */
-    public function hstsRating_rates_c_for_a_missing_header()
+    public function hstsRating_rates_0_for_a_missing_header()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200),
         ]);
-        $rating = new HSTSRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HSTSRating($response);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals("The header is not set.", $rating->getComment());
+        $this->assertEquals(0, $rating->score);
+
+        $expected = [
+            'translationStringId' => 'HEADER_NOT_SET',
+            'placeholders' => null,
+        ];
+        $this->assertEquals($expected, $rating->errorMessage);
     }
 
     /** @test */
@@ -28,13 +32,14 @@ public function hstsRating_rates_b_for_a_short_max_age()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                'Strict-Transport-Security' => 'max-age=30'
+                'Strict-Transport-Security' => 'max-age=30',
             ]),
         ]);
-        $rating = new HSTSRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HSTSRating($response);
 
-        $this->assertEquals("B", $rating->getRating());
-        $this->assertEquals('The value for "max-age" is smaller than 6 months.', $rating->getComment());
+        $this->assertEquals(60, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('HSTS_LESS_6'));
     }
 
     /** @test */
@@ -42,13 +47,14 @@ public function hstsRating_rates_a_for_a_good_max_age()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                'Strict-Transport-Security' => 'max-age=' . 6 * 31 * 24 * 60 * 60
+                'Strict-Transport-Security' => 'max-age=' . 6 * 31 * 24 * 60 * 60,
             ]),
         ]);
-        $rating = new HSTSRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HSTSRating($response);
 
-        $this->assertEquals("A", $rating->getRating());
-        $this->assertEquals('The value for "max-age" is greater than 6 months.', $rating->getComment());
+        $this->assertEquals(100, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('HSTS_MORE_6'));
     }
 
     /** @test */
@@ -56,13 +62,13 @@ public function hstsRating_rates_x_plus_for_includeSubDomains()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                'Strict-Transport-Security' => 'max-age=30; includeSubDomains'
+                'Strict-Transport-Security' => 'max-age=30; includeSubDomains',
             ]),
         ]);
-        $rating = new HSTSRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HSTSRating($response);
 
-        $this->assertStringEndsWith("+", $rating->getRating());
-        $this->assertStringEndsWith('"includeSubDomains" is set.', $rating->getComment());
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('INCLUDE_SUBDOMAINS'));
     }
 
     /** @test */
@@ -70,24 +76,27 @@ public function hstsRating_rates_x_plus_for_preload()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                'Strict-Transport-Security' => 'max-age=30; preload'
+                'Strict-Transport-Security' => 'max-age=30; preload',
             ]),
         ]);
-        $rating = new HSTSRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HSTSRating($response);
 
-        $this->assertStringEndsWith("+", $rating->getRating());
-        $this->assertStringEndsWith('"preload" is set.', $rating->getComment());
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('HSTS_PRELOAD'));
     }
 
-    /**
-     * This method sets and activates the GuzzleHttp Mocking functionality.
-     * @param array $responses
-     * @return Client
-     */
-    protected function getMockedGuzzleClient(array $responses)
+    /** @test */
+    public function HSTSRating_detects_wrong_encoding()
     {
-        $mock = new MockHandler($responses);
-        $handler = HandlerStack::create($mock);
-        return (new Client(["handler" => $handler])) ;
+        $client = $this->getMockedGuzzleClient([
+            // Producing an encoding error
+            new Response(200, ['Strict-Transport-Security' => zlib_encode('SGVsbG8gV29ybGQ=', ZLIB_ENCODING_RAW)]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new HSTSRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('HEADER_ENCODING_ERROR'));
+        $this->assertTrue($rating->hasError);
     }
 }
diff --git a/tests/Unit/Ratings/ReferrerPolicyRatingTest.php b/tests/Unit/Ratings/ReferrerPolicyRatingTest.php
new file mode 100644
index 0000000..92e3089
--- /dev/null
+++ b/tests/Unit/Ratings/ReferrerPolicyRatingTest.php
@@ -0,0 +1,138 @@
+<?php
+
+namespace Tests\Unit;
+
+use App\HTTPResponse;
+use App\Ratings\ReferrerPolicyRating;
+use GuzzleHttp\Psr7\Response;
+use Tests\TestCase;
+
+class ReferrerPolicyRatingTest extends TestCase
+{
+    /** @test */
+    public function referrerPolicy_rates_0_for_a_missing_header()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ReferrerPolicyRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $expected = [
+            'translationStringId' => 'HEADER_NOT_SET',
+            'placeholders' => null,
+        ];
+        $this->assertEquals($expected, $rating->errorMessage);
+    }
+
+    /** @test */
+    public function referrerPolicy_detects_wrong_encoding()
+    {
+        $client = $this->getMockedGuzzleClient([
+            // Producing an encoding error
+            new Response(200, ['Referrer-Policy' => zlib_encode('SGVsbG8gV29ybGQ=', ZLIB_ENCODING_RAW)]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ReferrerPolicyRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('HEADER_ENCODING_ERROR'));
+        $this->assertTrue($rating->hasError);
+    }
+
+    /** @test */
+    public function referrerPolicy_rates_100_for_privacy_protecting_directives()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Referrer-Policy' => 'no-referrer']),
+            new Response(200, ['Referrer-Policy' => 'same-origin']),
+        ]);
+
+        for ($i = 1; $i <= 2; $i++) {
+            $response = new HTTPResponse($this->request, $client);
+            $rating = new ReferrerPolicyRating($response);
+            $this->assertEquals(100, $rating->score);
+            $this->assertFalse($rating->hasError);
+        }
+    }
+
+    /** @test */
+    public function referrerPolicy_rates_70_for_downgrade_protective_directives()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Referrer-Policy' => 'strict-origin']),
+            new Response(200, ['Referrer-Policy' => 'strict-origin-when-cross-origin']),
+        ]);
+
+        for ($i = 1; $i <= 2; $i++) {
+            $response = new HTTPResponse($this->request, $client);
+            $rating = new ReferrerPolicyRating($response);
+            $this->assertEquals(70, $rating->score);
+            $this->assertFalse($rating->hasError);
+        }
+    }
+
+    /** @test */
+    public function referrerPolicy_rates_40_for_not_downgrade_protective_directives()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Referrer-Policy' => 'origin']),
+            new Response(200, ['Referrer-Policy' => 'origin-when-cross-origin']),
+        ]);
+
+        for ($i = 1; $i <= 2; $i++) {
+            $response = new HTTPResponse($this->request, $client);
+            $rating = new ReferrerPolicyRating($response);
+            $this->assertEquals(40, $rating->score);
+            $this->assertFalse($rating->hasError);
+        }
+    }
+
+    /** @test */
+    public function referrerPolicy_rates_10_for_an_empty_directive()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Referrer-Policy' => '']),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new ReferrerPolicyRating($response);
+        $this->assertEquals(10, $rating->score);
+        $this->assertFalse($rating->hasError);
+    }
+
+    /** @test */
+    public function referrerPolicy_rates_0_for_url_leaking_directives()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Referrer-Policy' => 'no-referrer-when-downgrade']),
+            new Response(200, ['Referrer-Policy' => 'unsafe-url']),
+        ]);
+
+        for ($i = 1; $i <= 2; $i++) {
+            $response = new HTTPResponse($this->request, $client);
+            $rating = new ReferrerPolicyRating($response);
+            $this->assertEquals(0, $rating->score);
+            $this->assertFalse($rating->hasError);
+        }
+    }
+
+    /** @test */
+    public function referrerPolicy_rates_0_with_error_for_all_not_defined_directives()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Referrer-Policy' => '#no-referrer']),
+            new Response(200, ['Referrer-Policy' => 'strange-config']),
+        ]);
+
+        for ($i = 1; $i <= 2; $i++) {
+            $response = new HTTPResponse($this->request, $client);
+            $rating = new ReferrerPolicyRating($response);
+            $this->assertEquals(0, $rating->score);
+            $this->assertTrue($rating->hasError);
+            $this->assertTrue(collect($rating->errorMessage)->contains('WRONG_DIRECTIVE_SET'));
+        }
+    }
+}
diff --git a/tests/Unit/Ratings/SetCookieRatingTest.php b/tests/Unit/Ratings/SetCookieRatingTest.php
new file mode 100644
index 0000000..01be714
--- /dev/null
+++ b/tests/Unit/Ratings/SetCookieRatingTest.php
@@ -0,0 +1,169 @@
+<?php
+
+namespace Tests\Unit;
+
+use App\HTTPResponse;
+use App\Ratings\SetCookieRating;
+use Delight\Cookie\Cookie;
+use GuzzleHttp\Psr7\Response;
+use Tests\TestCase;
+
+class SetCookieRatingTest extends TestCase
+{
+    /** @test */
+    public function setCookieRating_is_hidden_for_a_missing_header()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertEquals('hidden', $rating->scoreType);
+    }
+
+    /** @test */
+    public function setCookieRating_detects_wrong_encoding()
+    {
+        $client = $this->getMockedGuzzleClient([
+            // Producing an encoding error
+            new Response(200, ['Set-Cookie' => zlib_encode('SGVsbG8gV29ybGQ=', ZLIB_ENCODING_RAW)]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('HEADER_ENCODING_ERROR'));
+        $this->assertTrue($rating->hasError);
+    }
+
+    /** @test */
+    public function setCookieRating_detects_rates_0_if_no_security_flags_are_set()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Set-Cookie' => 'session=myCookie; Keks;']),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertFalse($rating->hasError);
+        $this->assertEquals(0, $rating->score);
+        $this->assertEquals('✗', $rating->testDetails[0]['placeholders']['HTTPONLY']);
+        $this->assertEquals('✗', $rating->testDetails[0]['placeholders']['SECURE']);
+    }
+
+    /** @test */
+    public function setCookieRating_detects_secure_flag()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Set-Cookie' => 'session=myCookie; Secure']),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertFalse($rating->hasError);
+        $this->assertEquals(90, $rating->score);
+        $this->assertEquals('🗸', $rating->testDetails[0]['placeholders']['SECURE']);
+    }
+
+    /** @test */
+    public function setCookieRating_detects_httpOnly_flag()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Set-Cookie' => 'myCookie=abc123; HttpOnly']),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertFalse($rating->hasError);
+        $this->assertEquals(10, $rating->score);
+        $this->assertEquals('🗸', $rating->testDetails[0]['placeholders']['HTTPONLY']);
+    }
+
+    /** @test */
+    public function setCookieRating_rates_100_if_secure_and_httpOnly_flags_are_set()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Set-Cookie' => 'session=myCookie; HttpOnly; secure']),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertFalse($rating->hasError);
+        $this->assertEquals(100, $rating->score);
+        $this->assertEquals('session', $rating->testDetails[0]['placeholders']['NAME']);
+        $this->assertEquals('🗸', $rating->testDetails[0]['placeholders']['HTTPONLY']);
+        $this->assertEquals('🗸', $rating->testDetails[0]['placeholders']['SECURE']);
+    }
+
+    /** @test */
+    public function setCookieRating_rates_an_average_score_if_different_cookies_are_set()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Set-Cookie' => ['session=myCookie; httponly', 'keks=newCookie; SECURE']]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertFalse($rating->hasError);
+        $this->assertEquals(50, $rating->score);
+
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Set-Cookie' => ['session=myCookie; Secure; HttpOnly', 'keks=newCookie; Secure; HttpOnly']]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertFalse($rating->hasError);
+        $this->assertEquals(100, $rating->score);
+
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Set-Cookie' => [
+                'session=myCookie; Secure',
+                'keks=newCookie; Secure; HttpOnly',
+                'kruemel=anotherCookie; HttpOnly',
+            ]]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertFalse($rating->hasError);
+        $this->assertEquals(67, $rating->score);
+    }
+
+    /** @test */
+    public function setCookieRating_is_type_hidden_and_if_there_are_cookies_type_is_set_to_warning()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, []),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertFalse($rating->hasError);
+        $this->assertEquals('hidden', $rating->scoreType);
+
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Set-Cookie' => 'session=myCookie; httponly']),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertFalse($rating->hasError);
+        $this->assertEquals('warning', $rating->scoreType);
+    }
+
+    /** @test */
+    public function a_invalid_SetCookie_header_will_be_catched_and_rated_with_minus5_score()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['Set-Cookie' => 'HttpOnly; Secure']),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SetCookieRating($response);
+
+        $this->assertEquals(200, $response->statusCode());
+        $this->assertEquals(-5, $rating->score);
+    }
+}
diff --git a/tests/Unit/Ratings/SinksRatingTest.php b/tests/Unit/Ratings/SinksRatingTest.php
new file mode 100644
index 0000000..7d27abc
--- /dev/null
+++ b/tests/Unit/Ratings/SinksRatingTest.php
@@ -0,0 +1,62 @@
+<?php
+
+namespace Tests\Unit;
+
+use App\DOMXSSCheck;
+use App\HTTPResponse;
+use App\Ratings\SinksRating;
+use GuzzleHttp\Psr7\Response;
+use Tests\TestCase;
+
+class SinksRatingTest extends TestCase
+{
+    /** @test */
+    public function sinksRatingRates100ForNoContent()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SinksRating($response);
+
+        $this->assertEquals(100, $rating->score);
+        $this->assertTrue($rating->hasError);
+        $this->assertTrue(collect($rating->errorMessage)->flatten()->contains('NO_CONTENT'));
+    }
+
+    /** @test */
+    public function sinksRatingRates100IfThereIsNoScriptTagOnThePage()
+    {
+        $sampleBody = file_get_contents(base_path() . '/tests/Unit/example.org.html');
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [], $sampleBody),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SinksRating($response);
+
+        $this->assertEquals(100, $rating->score);
+        $this->assertFalse($rating->hasError);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('NO_SCRIPT_TAGS'));
+    }
+
+    /** @test */
+    public function sinksRatingDoesNotFindSinksOutsideOfSearchContext()
+    {
+        $sampleBody = file_get_contents(base_path() . '/tests/Unit/hradek.test.html');
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [], $sampleBody),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SinksRating($response);
+
+        // Sinks total
+        $sinks = DOMXSSCheck::hasSinks($sampleBody, true);
+        $this->assertEquals(9, $sinks);
+
+        // Sinks in script-Tags
+        $this->assertEquals(1, $rating->testDetails->first()['placeholders']['AMOUNT']);
+    }
+}
diff --git a/tests/Unit/Ratings/SourcesRatingTest.php b/tests/Unit/Ratings/SourcesRatingTest.php
new file mode 100644
index 0000000..4820287
--- /dev/null
+++ b/tests/Unit/Ratings/SourcesRatingTest.php
@@ -0,0 +1,62 @@
+<?php
+
+namespace Tests\Unit;
+
+use App\DOMXSSCheck;
+use App\HTTPResponse;
+use App\Ratings\SourcesRating;
+use GuzzleHttp\Psr7\Response;
+use Tests\TestCase;
+
+class SourcesRatingTest extends TestCase
+{
+    /** @test */
+    public function sourcesRatingRates100ForNoContent()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SourcesRating($response);
+
+        $this->assertEquals(100, $rating->score);
+        $this->assertTrue($rating->hasError);
+        $this->assertTrue(collect($rating->errorMessage)->flatten()->contains('NO_CONTENT'));
+    }
+
+    /** @test */
+    public function sourcesRatingRates100IfThereIsNoScriptTagOnThePage()
+    {
+        $sampleBody = file_get_contents(base_path() . '/tests/Unit/example.org.html');
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [], $sampleBody),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SourcesRating($response);
+
+        $this->assertEquals(100, $rating->score);
+        $this->assertFalse($rating->hasError);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('NO_SCRIPT_TAGS'));
+    }
+
+    /** @test */
+    public function sourcesRatingDoesNotFindSourcesOutsideOfSearchContext()
+    {
+        $sampleBody = file_get_contents(base_path() . '/tests/Unit/hradek.test.html');
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, [], $sampleBody),
+        ]);
+
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new SourcesRating($response);
+
+        // Sources total
+        $sources = DOMXSSCheck::hasSources($sampleBody, true);
+        $this->assertEquals(6, $sources);
+
+        // Sources in script-Tags
+        $this->assertEquals(2, $rating->testDetails->first()['placeholders']['AMOUNT']);
+    }
+}
diff --git a/tests/Unit/Ratings/XContentTypeOptionsRatingTest.php b/tests/Unit/Ratings/XContentTypeOptionsRatingTest.php
index 6ab60b6..c776099 100644
--- a/tests/Unit/Ratings/XContentTypeOptionsRatingTest.php
+++ b/tests/Unit/Ratings/XContentTypeOptionsRatingTest.php
@@ -2,49 +2,68 @@
 
 namespace Tests\Unit;
 
+use App\HTTPResponse;
 use App\Ratings\XContentTypeOptionsRating;
-use Tests\TestCase;
-use GuzzleHttp\Client;
-use GuzzleHttp\Handler\MockHandler;
-use GuzzleHttp\HandlerStack;
 use GuzzleHttp\Psr7\Response;
+use Tests\TestCase;
 
 class XContentTypeOptionsRatingTest extends TestCase
 {
-
     /** @test */
-    public function xContentTypeOptionsRating_rates_c_for_a_missing_header()
+    public function xContentTypeOptionsRating_rates_a_missing_header()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200),
         ]);
-        $rating = new XContentTypeOptionsRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XContentTypeOptionsRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $expected = [
+            'translationStringId' => 'HEADER_NOT_SET',
+            'placeholders' => null,
+        ];
+        $this->assertEquals($expected, $rating->errorMessage);
+    }
+
+    /** @test */
+    public function xContentTypeOptionsRating_rates_a_correct_header()
+    {
+        $client = $this->getMockedGuzzleClient([
+            new Response(200, ['X-Content-Type-Options' => 'nosniff']),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XContentTypeOptionsRating($response);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals("The header is not set.", $rating->getComment());
+        $this->assertEquals(100, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('XCTO_CORRECT'));
     }
 
     /** @test */
-    public function xContentTypeOptionsRating_rates_a_for_a_correct_header()
+    public function xContentTypeOptionsRating_rates_a_wrong_header()
     {
         $client = $this->getMockedGuzzleClient([
-            new Response(200, [ "X-Content-Type-Options" => "nosniff" ]),
+            new Response(200, ['X-Content-Type-Options' => 'wrong entry']),
         ]);
-        $rating = new XContentTypeOptionsRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XContentTypeOptionsRating($response);
 
-        $this->assertEquals("A", $rating->getRating());
-        $this->assertEquals("The header is set correctly.", $rating->getComment());
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('XCTO_NOT_CORRECT'));
     }
 
-    /**
-     * This method sets and activates the GuzzleHttp Mocking functionality.
-     * @param array $responses
-     * @return Client
-     */
-    protected function getMockedGuzzleClient(array $responses)
+    /** @test */
+    public function xContentTypeOptionsRating_detects_wrong_encoding()
     {
-        $mock = new MockHandler($responses);
-        $handler = HandlerStack::create($mock);
-        return (new Client(["handler" => $handler])) ;
+        $client = $this->getMockedGuzzleClient([
+            // Producing an encoding error
+            new Response(200, ['X-Content-Type-Options' => zlib_encode('SGVsbG8gV29ybGQ=', ZLIB_ENCODING_RAW)]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XContentTypeOptionsRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('HEADER_ENCODING_ERROR'));
+        $this->assertTrue($rating->hasError);
     }
 }
diff --git a/tests/Unit/Ratings/XFrameOptionsRatingTest.php b/tests/Unit/Ratings/XFrameOptionsRatingTest.php
index 3685db9..4ac7972 100644
--- a/tests/Unit/Ratings/XFrameOptionsRatingTest.php
+++ b/tests/Unit/Ratings/XFrameOptionsRatingTest.php
@@ -2,25 +2,28 @@
 
 namespace Tests\Unit;
 
+use App\HTTPResponse;
 use App\Ratings\XFrameOptionsRating;
-use GuzzleHttp\Client;
-use GuzzleHttp\Handler\MockHandler;
-use GuzzleHttp\HandlerStack;
 use GuzzleHttp\Psr7\Response;
 use Tests\TestCase;
 
 class XFrameOptionsRatingTest extends TestCase
 {
     /** @test */
-    public function xFrameOptionsRating_rates_c_for_a_missing_header()
+    public function xFrameOptionsRating_rates_0_for_a_missing_header()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200),
         ]);
-        $rating = new XFrameOptionsRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XFrameOptionsRating($response);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals("The header is not set.", $rating->getComment());
+        $this->assertEquals(0, $rating->score);
+        $expected = [
+            'translationStringId' => 'HEADER_NOT_SET',
+            'placeholders' => null,
+        ];
+        $this->assertEquals($expected, $rating->errorMessage);
     }
 
     /** @test */
@@ -28,13 +31,14 @@ public function xFrameOptionsRating_rates_c_when_wildcards_are_used()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                "X-Frame-Options" => "allow-from *"
+                'X-Frame-Options' => 'allow-from *',
             ]),
         ]);
-        $rating = new XFrameOptionsRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XFrameOptionsRating($response);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals("The header contains wildcards and is thereby useless.", $rating->getComment());
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('XFO_WILDCARDS'));
     }
 
     /** @test */
@@ -42,24 +46,28 @@ public function xFrameOptionsRating_rates_a_when_set_and_no_wildcards_are_used()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200, [
-                "X-Frame-Options" => "deny"
+                'X-Frame-Options' => 'deny',
             ]),
         ]);
-        $rating = new XFrameOptionsRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XFrameOptionsRating($response);
 
-        $this->assertEquals("A", $rating->getRating());
-        $this->assertEquals("The header is set and does not contain any wildcard.", $rating->getComment());
+        $this->assertEquals(100, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('XFO_CORRECT'));
     }
 
-    /**
-     * This method sets and activates the GuzzleHttp Mocking functionality.
-     * @param array $responses
-     * @return Client
-     */
-    protected function getMockedGuzzleClient(array $responses)
+    /** @test */
+    public function XFrameOptionsRating_detects_wrong_encoding()
     {
-        $mock = new MockHandler($responses);
-        $handler = HandlerStack::create($mock);
-        return (new Client(["handler" => $handler])) ;
+        $client = $this->getMockedGuzzleClient([
+            // Producing an encoding error
+            new Response(200, ['X-Frame-Options' => zlib_encode('SGVsbG8gV29ybGQ=', ZLIB_ENCODING_RAW)]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XFrameOptionsRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('HEADER_ENCODING_ERROR'));
+        $this->assertTrue($rating->hasError);
     }
 }
diff --git a/tests/Unit/Ratings/XXSSProtectionRatingTest.php b/tests/Unit/Ratings/XXSSProtectionRatingTest.php
index a6784d8..bed4e5d 100644
--- a/tests/Unit/Ratings/XXSSProtectionRatingTest.php
+++ b/tests/Unit/Ratings/XXSSProtectionRatingTest.php
@@ -2,69 +2,81 @@
 
 namespace Tests\Unit;
 
+use App\HTTPResponse;
 use App\Ratings\XXSSProtectionRating;
-use GuzzleHttp\Client;
-use GuzzleHttp\Handler\MockHandler;
-use GuzzleHttp\HandlerStack;
 use GuzzleHttp\Psr7\Response;
 use Tests\TestCase;
 
 class XXSSProtectionRatingTest extends TestCase
 {
-
     /** @test */
-    public function xXSSProtection_rates_c_for_a_missing_header()
+    public function xXSSProtection_rates_0_for_a_missing_header()
     {
         $client = $this->getMockedGuzzleClient([
             new Response(200),
         ]);
-        $rating = new XXSSProtectionRating("http://testdomain", $client);
 
-        $this->assertEquals("C", $rating->getRating());
-        $this->assertEquals("The header is not set.", $rating->getComment());
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XXSSProtectionRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $expected = [
+            'translationStringId' => 'HEADER_NOT_SET',
+            'placeholders' => null,
+        ];
+        $this->assertEquals($expected, $rating->errorMessage);
     }
 
     /** @test */
-    public function xXSSProtection_rates_b_for_a_set_header()
+    public function xXSSProtection_rates_a_set_header()
     {
         $client = $this->getMockedGuzzleClient([
-            new Response(200, [ "X-Xss-Protection" => "0"]),
-            new Response(200, [ "X-Xss-Protection" => "1"]),
+            new Response(200, ['X-Xss-Protection' => '0']),
+            new Response(200, ['X-Xss-Protection' => '1']),
         ]);
 
-        $rating = new XXSSProtectionRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XXSSProtectionRating($response);
 
-        $this->assertEquals("B", $rating->getRating());
-        $this->assertEquals("The header is set correctly.", $rating->getComment());
+        $this->assertEquals(50, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('XXSS_CORRECT'));
+        $this->assertFalse(collect($rating->testDetails)->flatten()->contains('XXSS_BLOCK'));
 
-        $rating = new XXSSProtectionRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XXSSProtectionRating($response);
 
-        $this->assertEquals("B", $rating->getRating());
-        $this->assertEquals("The header is set correctly.", $rating->getComment());
+        $this->assertEquals(50, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('XXSS_CORRECT'));
+        $this->assertFalse(collect($rating->testDetails)->flatten()->contains('XXSS_BLOCK'));
     }
 
     /** @test */
-    public function xXSSProtection_rates_a_for_mode_block()
+    public function xXSSProtection_rates_mode_block()
     {
         $client = $this->getMockedGuzzleClient([
-            new Response(200, [ "X-Xss-Protection" => "1; mode=block"]),
+            new Response(200, ['X-Xss-Protection' => '1; mode=block']),
         ]);
 
-        $rating = new XXSSProtectionRating("http://testdomain", $client);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XXSSProtectionRating($response);
 
-        $this->assertEquals("A", $rating->getRating());
-        $this->assertEquals("The header is set correctly.\n\"mode=block\" is activated.", $rating->getComment());
+        $this->assertEquals(100, $rating->score);
+        $this->assertTrue(collect($rating->testDetails)->flatten()->contains('XXSS_BLOCK'));
+        $this->assertFalse(collect($rating->testDetails)->flatten()->contains('XXSS_CORRECT'));
     }
 
-    /**
-     * This method sets and activates the GuzzleHttp Mocking functionality.
-     * @param array $responses
-     * @return Client
-     */
-    protected function getMockedGuzzleClient(array $responses)
+    /** @test */
+    public function XXSSProtectionRating_detects_wrong_encoding()
     {
-        $mock = new MockHandler($responses);
-        $handler = HandlerStack::create($mock);
-        return (new Client(["handler" => $handler])) ;
+        $client = $this->getMockedGuzzleClient([
+            // Producing an encoding error
+            new Response(200, ['X-XSS-Protection' => zlib_encode('SGVsbG8gV29ybGQ=', ZLIB_ENCODING_RAW)]),
+        ]);
+        $response = new HTTPResponse($this->request, $client);
+        $rating = new XXSSProtectionRating($response);
+
+        $this->assertEquals(0, $rating->score);
+        $this->assertTrue(collect($rating->errorMessage)->contains('HEADER_ENCODING_ERROR'));
+        $this->assertTrue($rating->hasError);
     }
 }
diff --git a/tests/Unit/hradek.test.html b/tests/Unit/hradek.test.html
new file mode 100644
index 0000000..8ae579e
--- /dev/null
+++ b/tests/Unit/hradek.test.html
@@ -0,0 +1,49 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+    <title>Welcome!</title>
+    <meta charset="utf-8" />
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+    <link rel="stylesheet" type="text/css" href="src/standard.css">
+    <script type="text/javascript">localStorage; location.href = "correct"</script>
+    <!-- <script type="text/javascript">localStorage; location.href = "correct"</script> -->
+    <!-- script type="text/javascript" src="https://www.hradek.de/nur/ein/test/jquery.js?ver=1.2.3">/* nur ein Test. jquery gibt es hier gar nicht */</script -->
+    <!-- document.cookie -->
+    <!-- location.href=https://siwecos.de -->
+</head>
+innerHTML
+
+<body class="body-login-form">
+    <div id="main-wrapper">
+        <div id="overlay" class="hide"></div>
+        <div id="content" class="tab-content active" data-tabid="tab1">
+            <div id="login-wrapper">
+                <div id="login-form">
+                    <div id="login-form-form">
+                        <h2 class="b-title b-text b-text_lang_en">Welcome!</h2>
+                        <h2 class="b-title b-text b-text_lang_ru">Приветствуем!</h2>
+                        <div class="b-content">
+                            <span class="b-text b-text_lang_en">Site hradek.de just created.</span>
+                            <span class="b-text b-text_lang_ru">Сайт hradek.de только что создан.</span>
+                            <br/>
+                            <span class="b-text b-text_lang_en">Real content may or may not come.</span>
+                            <span class="b-text b-text_lang_ru">Контент может наступить позже.</span>
+                        </div>
+                    </div>
+                </div>
+                <div class="b-copyright">
+                    <a href="https://siwecos.de/scanned-by-siwecos?data-siwecos=hradek.de">
+                        <svg width="150" height="58" id="siwecos-seal" data-format="y-m-d" />
+                        <script src="src/seal.js"></script>
+                    </a>
+                </div>
+                <div id="error-log"></div>
+            </div>
+        </div>
+    </div>
+    <script type="text/javascript" src="src/standard.js"></script>
+    <div style="display:none"><a href="http://siwecos.de/tag/wordfence/jquery.js?ver=1.2.3">test</a></div>
+</body>
+
+</html>
diff --git a/webpack.config.js b/webpack.config.js
deleted file mode 100644
index d0f1aa1..0000000
--- a/webpack.config.js
+++ /dev/null
@@ -1,381 +0,0 @@
-let path = require('path');
-let webpack = require('webpack');
-let Mix = require('laravel-mix').config;
-let plugins = require('laravel-mix').plugins;
-
-
-/*
- |--------------------------------------------------------------------------
- | Mix Initialization
- |--------------------------------------------------------------------------
- |
- | As our first step, we'll require the project's Laravel Mix file
- | and record the user's requested compilation and build steps.
- | Once those steps have been recorded, we may get to work.
- |
- */
-
-Mix.initialize();
-
-
-/*
- |--------------------------------------------------------------------------
- | Webpack Context
- |--------------------------------------------------------------------------
- |
- | This prop will determine the appropriate context, when running Webpack.
- | Since you have the option of publishing this webpack.config.js file
- | to your project root, we will dynamically set the path for you.
- |
- */
-
-module.exports.context = Mix.Paths.root();
-
-
-/*
- |--------------------------------------------------------------------------
- | Webpack Entry
- |--------------------------------------------------------------------------
- |
- | We'll first specify the entry point for Webpack. By default, we'll
- | assume a single bundled file, but you may call Mix.extract()
- | to make a separate bundle specifically for vendor libraries.
- |
- */
-
-module.exports.entry = Mix.entry();
-
-
-/*
- |--------------------------------------------------------------------------
- | Webpack Output
- |--------------------------------------------------------------------------
- |
- | Webpack naturally requires us to specify our desired output path and
- | file name. We'll simply echo what you passed to with Mix.js().
- | Note that, for Mix.version(), we'll properly hash the file.
- |
- */
-
-module.exports.output = Mix.output();
-
-
-/*
- |--------------------------------------------------------------------------
- | Rules
- |--------------------------------------------------------------------------
- |
- | Webpack rules allow us to register any number of loaders and options.
- | Out of the box, we'll provide a handful to get you up and running
- | as quickly as possible, though feel free to add to this list.
- |
- */
-
-let vueExtractTextPlugin = false;
-
-if (Mix.options.extractVueStyles) {
-    vueExtractTextPlugin = Mix.vueExtractTextPlugin();
-
-    module.exports.plugins = (module.exports.plugins || []).concat(vueExtractTextPlugin);
-}
-
-
-module.exports.module = {
-    rules: [
-        {
-            test: /\.vue$/,
-            loader: 'vue-loader',
-            options: {
-                loaders: Mix.options.extractVueStyles ? {
-                    js: 'babel-loader' + Mix.babelConfig(),
-                    scss: vueExtractTextPlugin.extract({
-                        use: 'css-loader!sass-loader',
-                        fallback: 'vue-style-loader'
-                    }),
-                    sass: vueExtractTextPlugin.extract({
-                        use: 'css-loader!sass-loader?indentedSyntax',
-                        fallback: 'vue-style-loader'
-                    }),
-                    stylus: vueExtractTextPlugin.extract({
-                        use: 'css-loader!stylus-loader?paths[]=node_modules',
-                        fallback: 'vue-style-loader'
-                    }),
-                    css: vueExtractTextPlugin.extract({
-                        use: 'css-loader',
-                        fallback: 'vue-style-loader'
-                    })
-                }: {
-                    js: 'babel-loader' + Mix.babelConfig(),
-                    scss: 'vue-style-loader!css-loader!sass-loader',
-                    sass: 'vue-style-loader!css-loader!sass-loader?indentedSyntax',
-                    stylus: 'vue-style-loader!css-loader!stylus-loader?paths[]=node_modules'
-                },
-
-                postcss: Mix.options.postCss
-            }
-        },
-
-        {
-            test: /\.jsx?$/,
-            exclude: /(node_modules|bower_components)/,
-            loader: 'babel-loader' + Mix.babelConfig()
-        },
-
-        {
-            test: /\.css$/,
-            loaders: ['style-loader', 'css-loader']
-        },
-
-        {
-            test: /\.s[ac]ss$/,
-            include: /node_modules/,
-            loaders: ['style-loader', 'css-loader', 'sass-loader']
-        },
-
-        {
-            test: /\.html$/,
-            loaders: ['html-loader']
-        },
-
-        {
-            test: /\.(png|jpe?g|gif)$/,
-            loader: 'file-loader',
-            options: {
-                name: 'images/[name].[ext]?[hash]',
-                publicPath: Mix.resourceRoot
-            }
-        },
-
-        {
-            test: /\.(woff2?|ttf|eot|svg|otf)$/,
-            loader: 'file-loader',
-            options: {
-                name: 'fonts/[name].[ext]?[hash]',
-                publicPath: Mix.resourceRoot
-            }
-        },
-
-        {
-            test: /\.(cur|ani)$/,
-            loader: 'file-loader',
-            options: {
-                name: '[name].[ext]?[hash]',
-                publicPath: Mix.resourceRoot
-            }
-        }
-    ]
-};
-
-
-if (Mix.preprocessors) {
-    Mix.preprocessors.forEach(preprocessor => {
-        module.exports.module.rules.push(preprocessor.rules());
-
-        module.exports.plugins = (module.exports.plugins || []).concat(preprocessor.extractPlugin);
-    });
-}
-
-
-/*
- |--------------------------------------------------------------------------
- | Resolve
- |--------------------------------------------------------------------------
- |
- | Here, we may set any options/aliases that affect Webpack's resolving
- | of modules. To begin, we will provide the necessary Vue alias to
- | load the Vue common library. You may delete this, if needed.
- |
- */
-
-module.exports.resolve = {
-    extensions: ['*', '.js', '.jsx', '.vue'],
-
-    alias: {
-        'vue$': 'vue/dist/vue.common.js'
-    }
-};
-
-
-
-/*
- |--------------------------------------------------------------------------
- | Stats
- |--------------------------------------------------------------------------
- |
- | By default, Webpack spits a lot of information out to the terminal,
- | each you time you compile. Let's keep things a bit more minimal
- | and hide a few of those bits and pieces. Adjust as you wish.
- |
- */
-
-module.exports.stats = {
-    hash: false,
-    version: false,
-    timings: false,
-    children: false,
-    errors: false
-};
-
-process.noDeprecation = true;
-
-module.exports.performance = { hints: false };
-
-
-
-/*
- |--------------------------------------------------------------------------
- | Devtool
- |--------------------------------------------------------------------------
- |
- | Sourcemaps allow us to access our original source code within the
- | browser, even if we're serving a bundled script or stylesheet.
- | You may activate sourcemaps, by adding Mix.sourceMaps().
- |
- */
-
-module.exports.devtool = Mix.sourcemaps;
-
-
-
-/*
- |--------------------------------------------------------------------------
- | Webpack Dev Server Configuration
- |--------------------------------------------------------------------------
- |
- | If you want to use that flashy hot module replacement feature, then
- | we've got you covered. Here, we'll set some basic initial config
- | for the Node server. You very likely won't want to edit this.
- |
- */
-module.exports.devServer = {
-    historyApiFallback: true,
-    noInfo: true,
-    compress: true,
-    quiet: true
-};
-
-
-
-/*
- |--------------------------------------------------------------------------
- | Plugins
- |--------------------------------------------------------------------------
- |
- | Lastly, we'll register a number of plugins to extend and configure
- | Webpack. To get you started, we've included a handful of useful
- | extensions, for versioning, OS notifications, and much more.
- |
- */
-
-module.exports.plugins = (module.exports.plugins || []).concat([
-    new webpack.ProvidePlugin(Mix.autoload || {
-        jQuery: 'jquery',
-        $: 'jquery',
-        jquery: 'jquery'
-    }),
-
-    new plugins.FriendlyErrorsWebpackPlugin(),
-
-    new plugins.StatsWriterPlugin({
-        filename: 'mix-manifest.json',
-        transform: Mix.manifest.transform.bind(Mix.manifest),
-    }),
-
-    new plugins.WebpackMd5HashPlugin(),
-
-    new webpack.LoaderOptionsPlugin({
-        minimize: Mix.inProduction,
-        options: {
-            postcss: Mix.options.postCss,
-            context: __dirname,
-            output: { path: './' }
-        }
-    })
-]);
-
-
-if (Mix.browserSync) {
-    module.exports.plugins.push(
-        new plugins.BrowserSyncPlugin(
-            Object.assign({
-                host: 'localhost',
-                port: 3000,
-                proxy: 'app.dev',
-                files: [
-                    'app/**/*.php',
-                    'resources/views/**/*.php',
-                    'public/js/**/*.js',
-                    'public/css/**/*.css'
-                ]
-            }, Mix.browserSync),
-            {
-                reload: false
-            }
-        )
-    );
-}
-
-
-if (Mix.notifications) {
-    module.exports.plugins.push(
-        new plugins.WebpackNotifierPlugin({
-            title: 'Laravel Mix',
-            alwaysNotify: true,
-            contentImage: Mix.Paths.root('node_modules/laravel-mix/icons/laravel.png')
-        })
-    );
-}
-
-
-if (Mix.copy) {
-    Mix.copy.forEach(copy => {
-        module.exports.plugins.push(
-            new plugins.CopyWebpackPlugin([copy])
-        );
-    });
-}
-
-
-if (Mix.extract) {
-    module.exports.plugins.push(
-        new webpack.optimize.CommonsChunkPlugin({
-            names: Mix.entryBuilder.extractions.concat([
-                path.join(Mix.js.base, 'manifest').replace(/\\/g, '/')
-            ]),
-            minChunks: Infinity
-        })
-    );
-}
-
-
-if (Mix.inProduction) {
-    module.exports.plugins.push(
-        new webpack.DefinePlugin({
-            'process.env': {
-                NODE_ENV: '"production"'
-            }
-        }),
-
-        new webpack.optimize.UglifyJsPlugin(Mix.options.uglify)
-    );
-}
-
-
-module.exports.plugins.push(
-    new plugins.WebpackOnBuildPlugin(
-        stats => Mix.events.fire('build', stats)
-    )
-);
-
-
-/*
- |--------------------------------------------------------------------------
- | Mix Finalizing
- |--------------------------------------------------------------------------
- |
- | Now that we've declared the entirety of our Webpack configuration, the
- | final step is to scan for any custom configuration in the Mix file.
- | If mix.webpackConfig() is called, we'll merge it in, and build!
- |
- */
-Mix.finalize(module.exports);
diff --git a/webpack.mix.js b/webpack.mix.js
deleted file mode 100644
index d781c69..0000000
--- a/webpack.mix.js
+++ /dev/null
@@ -1,43 +0,0 @@
-let mix = require('laravel-mix');
-
-/*
- |--------------------------------------------------------------------------
- | Mix Asset Management
- |--------------------------------------------------------------------------
- |
- | Mix provides a clean, fluent API for defining some Webpack build steps
- | for your Laravel application. By default, we are compiling the Sass
- | file for your application, as well as bundling up your JS files.
- |
- */
-
-mix.js('resources/assets/js/start.js', 'public/js')
-    .sass('resources/assets/sass/app.scss', 'public/css')
-    .version();
-
-// Full API
-// mix.js(src, output);
-// mix.react(src, output); <-- Identical to mix.js(), but registers React Babel compilation.
-// mix.extract(vendorLibs);
-// mix.sass(src, output);
-// mix.less(src, output);
-// mix.stylus(src, output);
-// mix.browserSync('my-site.dev');
-// mix.combine(files, destination);
-// mix.babel(files, destination); <-- Identical to mix.combine(), but also includes Babel compilation.
-// mix.copy(from, to);
-// mix.minify(file);
-// mix.sourceMaps(); // Enable sourcemaps
-// mix.version(); // Enable versioning.
-// mix.disableNotifications();
-// mix.setPublicPath('path/to/public');
-// mix.setResourceRoot('prefix/for/resource/locators');
-// mix.autoload({}); <-- Will be passed to Webpack's ProvidePlugin.
-// mix.webpackConfig({}); <-- Override webpack.config.js, without editing the file directly.
-// mix.then(function () {}) <-- Will be triggered each time Webpack finishes building.
-// mix.options({
-//   extractVueStyles: false, // Extract .vue component styling to file, rather than inline.
-//   processCssUrls: true, // Process/optimize relative stylesheet url()'s. Set to false, if you don't want them touched.
-//   uglify: {}, // Uglify-specific options. https://webpack.github.io/docs/list-of-plugins.html#uglifyjsplugin
-//   postCss: [] // Post-CSS options: https://github.com/postcss/postcss/blob/master/docs/plugins.md
-// });