Ubiquity\security\csp\NonceGenerator

Complexity

Total Complexity

4

Size/Duplication

Total Lines	18
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	1

3 Methods

Rating	Name	Duplication	Size	Complexity
A	getNonce()	0	2	1
A	_generateNonce()	0	7	2
A	onNonce()	0	1	1

<?php
namespace Ubiquity\security\csp;

use Ubiquity\utils\http\URequest;

class NonceGenerator {

	private array $nonces = [];

	protected function _generateNonce(string $name, ?int $value = null): string {
		$bytes = \random_bytes((int) ($value ?? 32));
		$nonce = \base64_encode($bytes);
		if (! URequest::isAjax()) {
			$this->onNonce($name, $nonce);
		}
		return $nonce;
	}

	public function getNonce(string $name) {
		return $this->nonces[$name] ??= self::_generateNonce($name, $value);

The method Ubiquity\security\csp\NonceGenerator::_generateNonce() is not static, but was called statically.

The variable $value seems to be never defined.

	}

	function onNonce(string $name, string $value) {}

The parameter $value is not used and could be removed.

The parameter $name is not used and could be removed.

It is generally recommended to explicitly declare the visibility for methods.

}