nicoSWD\SecHeaderCheck\Domain\Validator\Header\XXSSProtectionHeader

Complexity

Total Complexity

5

Size/Duplication

Total Lines	33
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes

0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	isBlocking()	0	3	1
A	parse()	0	8	1
A	hasReportUri()	0	3	1
A	getOptions()	0	3	1
A	protectionIsOn()	0	3	1

<?php declare(strict_types=1);

/**
 * @license  http://opensource.org/licenses/mit-license.php MIT
 * @link     https://github.com/nicoSWD
 * @author   Nicolas Oelgart <nico@oelgart.com>
 */
namespace nicoSWD\SecHeaderCheck\Domain\Validator\Header;

use nicoSWD\SecHeaderCheck\Domain\Result\Result\XXSSProtectionHeaderResult;
use nicoSWD\SecHeaderCheck\Domain\Validator\AbstractHeaderParser;

final class XXSSProtectionHeader extends AbstractHeaderParser
{
    private const MODE_ON = '1';
    private const MODE_BLOCK = 'mode=block';

    public function parse(): XXSSProtectionHeaderResult
    {
        $options = $this->getOptions();

        return (new XXSSProtectionHeaderResult($this->getName(), $this->getValue()))
            ->setProtectionIsOn($this->protectionIsOn($options))
            ->setIsBlocking($this->isBlocking($options))
            ->setHasReportUri($this->hasReportUri($options));
    }

    private function protectionIsOn(array $options): bool
    {
        return in_array(self::MODE_ON, $options, true);
    }

    private function isBlocking(array $options): bool
    {
        return in_array(self::MODE_BLOCK, $options, true);
    }

    private function hasReportUri(array $options): bool
    {
        return count(preg_grep('~report=~', $options)) === 1;
    }

    private function getOptions(): array
    {
        return preg_split('~\s*;\s*~', $this->getValue(), -1, PREG_SPLIT_NO_EMPTY);

The expression return preg_split('~\s*;\s*~', $this->getValue(), -1, nicoSWD\SecHeaderCheck\Domain\Validator\Header\PREG_SPLIT_NO_EMPTY) could return the type false which is incompatible with the type-hinted return array. Consider adding an additional type-check to rule them out.

    }
}