Longman\LaravelLodash\Middlewares\XssSecurity::handle()

Complexity

Conditions	4
Paths	3

Size

Total Lines

26

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	20

Importance

Changes

0

<?php
    public function handle(Request $request, Closure $next)
    {
        /** @var \Illuminate\Http\Response $response */
        $response = $next($request);

        $requestUri = $request->getUri();
        $excluded = config('lodash.xss.exclude_uris');
        if (! empty($excluded)) {
            foreach ($excluded as $uri) {
                if (strpos($requestUri, $uri) !== false) {
                    return $response;
                }
            }
        }

        /** @see http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx */
        $response->headers->set('X-Frame-Options', config('lodash.xss.x_frame_options'), true);

        /** @see http://msdn.microsoft.com/en-us/library/ie/gg622941(v=vs.85).aspx */
        $response->headers->set('X-Content-Type-Options', config('lodash.xss.x_content_type_options'), true);

        /** @see http://msdn.microsoft.com/en-us/library/dd565647(v=vs.85).aspx */
        $response->headers->set('X-XSS-Protection', config('lodash.xss.x_xss_protection'), true);

        return $response;
    }
}