Distilleries\Security\Http\Middleware\XSS::handle()

Complexity

Conditions	5
Paths	2

Size

Total Lines	28
Code Lines	14

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	16
CRAP Score	5

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function handle(Request $request, Closure $next)
    {

        if (config('security.xss_enable') || config('security.html_purifier')) {
            $input = $request->all();


            $config = \HTMLPurifier_Config::createDefault();
            $config->set('AutoFormat.RemoveSpansWithoutAttributes', true);
            $config->set('AutoFormat.RemoveEmpty', true);
            $config->set('HTML.TidyLevel', 'heavy');
            $config->set('Cache.DefinitionImpl', null);
            //$config->set('HTML.SafeIframe', true);

            array_walk_recursive($input, function(&$input) use ($config) {
                if (config('security.html_purifier')) {
                    $input = (new \HTMLPurifier($config))->purify($input);
                }
                if (config('security.xss_enable')) {
                    $input = (new Security)->xss_clean($input);
                }

            });

            $request->merge($input);
        }

        return $next($request);

}