s9e\TextFormatter\Configurator\TemplateNormalizations\SetRelNoreferrerOnTargetedLinks

Complexity

Total Complexity

7

Size/Duplication

Total Lines	59
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	1

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	addRelAttribute()	0	11	2
A	linkTargetCanAccessOpener()	0	16	3
A	normalizeElement()	0	7	2

<?php

/**
* @package   s9e\TextFormatter
* @copyright Copyright (c) 2010-2017 The s9e Authors
* @license   http://www.opensource.org/licenses/mit-license.php The MIT License
*/
namespace s9e\TextFormatter\Configurator\TemplateNormalizations;

use DOMElement;

/**
* Adds rel="noreferrer" on links that open in a new context that would allow window.opener to be
* accessed.
*
* @link https://mathiasbynens.github.io/rel-noopener/
* @link https://wiki.whatwg.org/wiki/Links_to_Unrelated_Browsing_Contexts
*/
class SetRelNoreferrerOnTargetedLinks extends AbstractNormalization
{
	/**
	* {@inheritdoc}
	*/
	protected $queries = ['//a', '//area'];

	/**
	* Add a rel="noreferrer" attribute to given element
	*
	* @param  DOMElement $element
	* @return void
	*/
	protected function addRelAttribute(DOMElement $element)
	{
		$rel = $element->getAttribute('rel');
		if (preg_match('(\\S$)', $rel))
		{
			$rel .= ' ';
		}
		$rel .= 'noreferrer';

		$element->setAttribute('rel', $rel);
	}

	/**
	* Test whether given link element will let the target access window.opener
	*
	* @param  DOMElement $element
	* @return bool
	*/
	protected function linkTargetCanAccessOpener(DOMElement $element)
	{
		// Can't access window.opener if the link doesn't have a target
		if (!$element->hasAttribute('target'))
		{
			return false;
		}

		// Can't access window.opener if the link already has rel="noopener" or rel="noreferrer"
		if (preg_match('(\\bno(?:open|referr)er\\b)', $element->getAttribute('rel')))
		{
			return false;
		}

		return true;
	}

	/**
	* {@inheritdoc}
	*/
	protected function normalizeElement(DOMElement $element)
	{
		if ($this->linkTargetCanAccessOpener($element))
		{
			$this->addRelAttribute($element);
		}
	}
}