Ubiquity\security\csp\ContentSecurity

Complexity

Total Complexity

12

Size/Duplication

Total Lines	58
Duplicated Lines	0 %

Importance

Changes	2
Bugs	0	Features	1

7 Methods

Rating	Name	Duplication	Size	Complexity
A	addPolicy()	0	10	3
A	addNonce()	0	8	2
A	setDefaultSrc()	0	2	1
A	addHeaderToResponse()	0	2	1
A	reportOnly()	0	3	2
A	generate()	0	7	2
A	nonce()	0	4	1

<?php
namespace Ubiquity\security\csp;

use Ubiquity\utils\http\UResponse;

/**
 * Creates a Content Security Policy object.
 * Ubiquity\security\csp$ContentSecurity
 * This class is part of Ubiquity
 *
 * @author jc
 * @version 1.0.0
 *
 */
class ContentSecurity {

	const HEADER = 'Content-Security-Policy';

	const DEBUG_HEADER = 'Content-Security-Policy-Report-Only';

	private array $policies = [];

	private $header = self::HEADER;

	public function addPolicy(string $directive, string ...$values): self {
		$policies = $this->policies[$directive] ?? [];
		foreach ($values as $v) {
			if (\in_array($v, CspValues::QUOTED)) {
				$v = "'$v'";
			}
			$policies[$v] = true;
		}
		$this->policies[$directive] = $policies;
		return $this;
	}

	public function addNonce(string $nonce, string ...$directives): self {
		$directives ??= [
			CspDirectives::DEFAULT_SRC
		];
		foreach ($directives as $directive) {
			$this->policies[$directive]["'nonce-$nonce'"] = true;
		}
		return $this;
	}

	public function setDefaultSrc(string ...$policies) {
		return $this->addPolicy(CspDirectives::DEFAULT_SRC, ...$policies);
	}

	public function generate(): string {
		$strs = '';
		foreach ($this->policies as $directive => $policy) {
			$policies = \array_keys($policy);
			$strs .= $directive . ' ' . \implode(' ', $policies) . ';';
		}
		return $strs;
	}

	public function reportOnly(bool $reportOnly = true): self {
		$this->header = $reportOnly ? self::DEBUG_HEADER : self::HEADER;
		return $this;
	}

	public function addHeaderToResponse(): void {
		UResponse::header($this->header, $this->generate());
	}

	public static function nonce($nonce, string ...$directives): void {
		$csp = new self();
		$csp->addNonce($nonce, ...$directives);
		$csp->addHeaderToResponse();
	}
}