View GitHub Repository vpn-lib-common

Schedule Inspection
Subscribe

GitHub Access Token became invalid

It seems like the GitHub access token used for retrieving details about this repository from GitHub became invalid. This might prevent certain types of inspections from being run (in particular, everything related to pull requests).
Please ask an admin of your repository to re-new the access token on this website.
Completed
Push — master ( d1a3e4...041256 )
by François
02:21
created

SecurityHeadersHook::executeAfter()   A

↳ Parent: SecurityHeadersHook

Complexity

Conditions 1
Paths 1

Size

Total Lines 12
Code Lines 6

Duplication

Lines 0
Ratio 0 %

Importance

Changes 0
Metric Value
dl 0
loc 12
c 0
b 0
f 0
rs 9.4285
cc 1
eloc 6
nc 1
nop 2
1 
<?php
2 
/**
3 
 *  Copyright (C) 2016 SURFnet.
4 
 *
5 
 *  This program is free software: you can redistribute it and/or modify
6 
 *  it under the terms of the GNU Affero General Public License as
7 
 *  published by the Free Software Foundation, either version 3 of the
8 
 *  License, or (at your option) any later version.
9 
 *
10 
 *  This program is distributed in the hope that it will be useful,
11 
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
12 
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13 
 *  GNU Affero General Public License for more details.
14 
 *
15 
 *  You should have received a copy of the GNU Affero General Public License
16 
 *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
17 
 */
18 
namespace SURFnet\VPN\Common\Http;
19 

            


            
                                                                                                            
                            
            
                                    
            
            

                
                    20
                

                                    
                                                    
                
                
                
class SecurityHeadersHook implements AfterHookInterface

            


            
                                                                                                            
                                                                
            
                                    
            
            

                
                    21
                

                                    
                                                    
                
                
                
{

            


            
                                                        
            
                                    
            
            

                
                    22
                

                                    
                                                    
                
                
                
    public function executeAfter(Request $request, Response $response)

            


            
                                                        
            
                                    
            
            

                
                    23
                

                                    
                                                    
                
                
                
    {

            


            
                                                        
            
                                    
            
            

                
                    24
                

                                    
                                                    
                
                
                
        // XXX only add them if the request comes from a browser

            


            
                                                        
            
                                    
            
            

                
                    25
                

                                    
                                                    
                
                
                
        // CSP: https://developer.mozilla.org/en-US/docs/Security/CSP

            


            
                                                        
            
                                    
            
            

                
                    26
                

                                    
                                                    
                
                
                
        $response->addHeader('Content-Security-Policy', "default-src 'self'");

            


            
                                                        
            
                                    
            
            

                
                    27
                

                                    
                                                    
                
                
                
        // X-Frame-Options: https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options

            


            
                                                        
            
                                    
            
            

                
                    28
                

                                    
                                                    
                
                
                
        $response->addHeader('X-Frame-Options', 'DENY');

            


            
                                                        
            
                                    
            
            

                
                    29
                

                                    
                                                    
                
                
                
        $response->addHeader('X-Content-Type-Options', 'nosniff');

            


            
                                                        
            
                                    
            
            

                
                    30
                

                                    
                                                    
                
                
                
        $response->addHeader('X-Xss-Protection', '1; mode=block');

            


            
                                                        
            
                                    
            
            

                
                    31
                

                                    
                                                    
                
                
                

            


            
                                                        
            
                                    
            
            

                
                    32
                

                                    
                                                    
                
                
                
        return $response;

            


            
                                                        
            
                                    
            
            

                
                    33
                

                                    
                                                    
                
                
                
    }

            


            
                                                        
            
                                    
            
            

                
                    34
                

                                    
                                                    
                
                
                
}

            


            
                                                        
            
                                    
            
            

                
                    35