---
title: "Licenses and data"
manual: "HTTP Guard"
version: "main"
permalink: "https://docs.typo3.org/permalink/netresearch/nr-http-guard:licenses@main"
source: "Development/Licenses.rst"
rendered: "2026-10-18T14:31:38+00:00"
---

# Licenses and data {#licenses}

## Extension and security core {#licenses-extension}

The single TYPO3 extension `netresearch/nr-http-guard` is supplied
under **GPL-2.0-or-later**. The complete GPLv2 text is in `LICENSE.txt`
at the extension root.

The embedded security core under `Classes/HttpGuard/` was created
under MIT. Its license and copyright notices are preserved; the complete
text is in `LICENSE-HttpGuard.txt`. Combining the code does not create
a second published package or claim to relicense the core.
`LICENSES.md` describes the license mapping within the package.

Third-party runtime libraries are not bundled again in a separate vendor
directory. The supported TYPO3 installation provides these components;
their own license notices continue to apply. The optional nr-vault patch
belongs to the existing GPL-licensed nr-vault project.

## Netresearch logo {#licenses-branding}

The unchanged logo under [`Resources/Public/Icons/Extension.svg`](https://docs.typo3.org/m/typo3/reference-coreapi/14.3/en-us/ExtensionArchitecture/FileStructure/Resources/Public/Index.html#file-extension-resources-public-icons-extension-svg) is
copyright Netresearch DTT GmbH and licensed under
[CC-BY-SA-4.0](https://creativecommons.org/licenses/by-sa/4.0/).
The SVG retains its original license and attribution notices.

## Address data and sources {#licenses-sources}

The bundled data under
`Resources/Private/HttpGuard/data/security-corpus/` contains the
derived rules, binary test corpus and a source manifest. It distinguishes
the retrieval date, registry version, hash of the downloaded original and
hash of the derived rules. The primary registries are the
[IANA IPv4 Special-Purpose Address Registry](https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml)
and the
[IANA IPv6 Special-Purpose Address Registry](https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml).

Additional metadata denials are justified in the same source metadata. The
respective source licenses and rights to recorded third-party material
remain in effect. [Original specifications and ADRs](https://github.com/netresearch/typo3_http_guard/blob/3f929ae8794ca04ab3dd25627e94d601a2db23e0/specification/README.md)
are preserved unchanged in Git history and the external source archive.
This manual does not retrospectively alter their original statements.

Address data is versioned with the extension. A rule update requires a new
approval with corpus, CIDR and actual wire checks, and replacement of the
affected policy snapshots.