Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory :  /home/corals/old/vendor/magento/module-csp/Model/Policy/Renderer/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

<?php
/**
 * Copyright © Magento, Inc. All rights reserved.
 * See COPYING.txt for license details.
 */
declare(strict_types=1);

namespace Magento\Csp\Model\Policy\Renderer;

use Magento\Csp\Api\Data\ModeConfiguredInterface;
use Magento\Csp\Api\Data\PolicyInterface;
use Magento\Csp\Api\ModeConfigManagerInterface;
use Magento\Csp\Api\PolicyRendererInterface;
use Magento\Csp\Model\Policy\SimplePolicyInterface;
use Magento\Framework\App\Response\HttpInterface as HttpResponse;

/**
 * Renders a simple policy as a "Content-Security-Policy" header.
 */
class SimplePolicyHeaderRenderer implements PolicyRendererInterface
{
    /**
     * @var ModeConfigManagerInterface
     */
    private $modeConfig;

    /**
     * @param ModeConfigManagerInterface $modeConfig
     */
    public function __construct(ModeConfigManagerInterface $modeConfig)
    {
        $this->modeConfig = $modeConfig;
    }

    /**
     * @inheritDoc
     */
    public function render(PolicyInterface $policy, HttpResponse $response): void
    {
        /** @var SimplePolicyInterface $policy */
        $config = $this->modeConfig->getConfigured();
        if ($config->isReportOnly()) {
            $header = 'Content-Security-Policy-Report-Only';
        } else {
            $header = 'Content-Security-Policy';
        }
        $value = $policy->getId() .' ' .$policy->getValue() .';';
        if ($config->getReportUri() && !$response->getHeader('Report-To')) {
            $reportToData = [
                'group' => 'report-endpoint',
                'max_age' => 10886400,
                'endpoints' => [
                    ['url' => $config->getReportUri()]
                ]
            ];
            $value .= ' report-uri ' .$config->getReportUri() .';';
            $value .= ' report-to '. $reportToData['group'] .';';
            $response->setHeader('Report-To', json_encode($reportToData), true);
        }
        if ($existing = $response->getHeader($header)) {
            $value = $value .' ' .$existing->getFieldValue();
        }
        $response->setHeader($header, $value, true);
    }

    /**
     * @inheritDoc
     */
    public function canRender(PolicyInterface $policy): bool
    {
        return true;
    }
}