Longman\LaravelLodash\Middlewares\XssSecurity

Complexity

Total Complexity

4

Size/Duplication

Total Lines	29
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	3

Test Coverage

Coverage

0%

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
A	handle()	0	26	4

<?php

declare(strict_types=1);

namespace Longman\LaravelLodash\Middlewares;

use Closure;
use Illuminate\Http\Request;

use function strpos;

class XssSecurity
{
    public function handle(Request $request, Closure $next)
    {
        /** @var \Illuminate\Http\Response $response */
        $response = $next($request);

        $requestUri = $request->getUri();
        $excluded = config('lodash.xss.exclude_uris');
        if (! empty($excluded)) {
            foreach ($excluded as $uri) {
                if (strpos($requestUri, $uri) !== false) {
                    return $response;
                }
            }
        }

        /** @see http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx */
        $response->headers->set('X-Frame-Options', config('lodash.xss.x_frame_options'), true);

        /** @see http://msdn.microsoft.com/en-us/library/ie/gg622941(v=vs.85).aspx */
        $response->headers->set('X-Content-Type-Options', config('lodash.xss.x_content_type_options'), true);

        /** @see http://msdn.microsoft.com/en-us/library/dd565647(v=vs.85).aspx */
        $response->headers->set('X-XSS-Protection', config('lodash.xss.x_xss_protection'), true);

        return $response;
    }
}