Spatie\Csp\Profiles\Profile

Complexity

Total Complexity

12

Size/Duplication

Total Lines	89
Duplicated Lines	0 %

Coupling/Cohesion

Components	2
Dependencies	4

Importance

Changes

0

10 Methods

Rating	Name	Duplication	Size	Complexity
A	reportOnly()	0	6	1
A	enforce()	0	6	1
A	reportTo()	0	14	1
A	shouldBeApplied()	0	4	1
A	addDirective()	0	8	1
	configure()	0	1	?
A	addNonceForDirective()	0	4	1
A	applyTo()	0	14	3
A	__toString()	0	10	1
A	guardAgainstInvalidDirectives()	0	6	2

<?php

namespace Spatie\Csp\Profiles;

use Spatie\Csp\Directive;
use Illuminate\Http\Request;
use Spatie\Csp\Exceptions\InvalidDirective;
use Symfony\Component\HttpFoundation\Response;

abstract class Profile
{
    protected $directives = [];

    protected $reportOnly = false;

    abstract public function configure();

    public function addDirective(string $directive, string $value): self
    {
        $this->guardAgainstInvalidDirectives($directive);

        $this->directives[$directive][] = $value;

        return $this;
    }

    public function reportOnly(): self
    {
        $this->reportOnly = true;

        return $this;
    }

    public function enforce(): self
    {
        $this->reportOnly = false;

        return $this;
    }

    public function reportTo(string $uri): self
    {
        $this->directives['report-uri'] = [$uri];

        $reportToContents = json_encode([
            'url' => $uri,
            'group-name' => class_basename(static::class),
            'max-age' => 60 * 60 * 24 * 7 * 30,
        ]);

        $this->directives['report-to'] = [$reportToContents];

        return $this;
    }

    public function shouldBeApplied(Request $request, Response $response): bool

The parameter $request is not used and could be removed.

The parameter $response is not used and could be removed.

    {
        return config('csp.enabled');
    }

    public function addNonceForDirective(string $directive): self
    {
        return $this->addDirective($directive, "nonce-" . app('csp-nonce'));
    }

    public function applyTo(Response $response)
    {
        $this->configure();

        $headerName = $this->reportOnly
            ? 'Content-Security-Policy-Report-Only'
            : 'Content-Security-Policy';

        if ($response->headers->has($headerName)) {
            return;
        }

        $response->headers->set($headerName, (string) $this);
    }

    public function __toString()
    {
        return collect($this->directives)
            ->map(function (array $values, string $directive) {
                $valueString = implode(' ', $values);

                return "{$directive} {$valueString}";
            })
            ->implode(';');
    }

    protected function guardAgainstInvalidDirectives(string $directive)
    {
        if (! Directive::isValid($directive)) {
            throw InvalidDirective::notSupported($directive);
        }
    }
}