BrainExe\Core\Middleware\Security

Complexity

Total Complexity

5

Size/Duplication

Total Lines	46
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	4

Test Coverage

Coverage

100%

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	processResponse()	0	11	3
A	getContentSecurityPolicy()	0	10	1

<?php

namespace BrainExe\Core\Middleware;

use BrainExe\Annotations\Annotations\Inject;
use BrainExe\Core\Annotations\Middleware;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;

/**
 * @Middleware("Middleware.Security")
 */
class Security extends AbstractMiddleware
{

    /**
     * @var string
     */
    private $socketUrl;

    /**
     * @Inject("%socket.url%")
     * @param $socketHost
     */
    public function __construct(string $socketHost)
    {
        $this->socketUrl = $socketHost;
    }

    /**
     * {@inheritdoc}
     */
    public function processResponse(Request $request, Response $response)
    {
        if (!$request->isXmlHttpRequest()) {
            $response->headers->set('Content-Security-Policy', $this->getContentSecurityPolicy());
            $response->headers->set('X-Frame-Options', 'DENY');

            if ($request->isSecure()) {
                $response->headers->set('Strict-Transport-Security', 'max-age=31536000 ; includeSubDomains');
            }
        }
    }

    /**
     * @return string
     */
    protected function getContentSecurityPolicy() : string
    {
        $parts = [
            'default-src \'self\'',
            'style-src \'self\' \'unsafe-inline\'',
            sprintf('connect-src \'self\' %s', $this->socketUrl),
        ];

        return implode('; ', $parts);
    }
}