1. class
  2. mako
  3. \
  4. http
  5. \
  6. routing
  7. \
  8. middleware
  9. \
  10. ContentSecurityPolicy

ContentSecurityPolicy

class ContentSecurityPolicy implements MiddlewareInterface

Content security policy middleware.

Properties

protected Container; $container Container.
protected array|null $reportTo Report to.
protected bool $reportOnly Should we only report content security policy violations?
protected array $directives Content security policy directives.
protected string|null $nonce Content security policy nonce.
protected string $nonceVariableName Content security policy nonce view variable name.

Methods

__construct(Container $container)

Constructor.

string
buildReportToValue()

Builds the "Report-To" header value.

string
generateNonce()

Generates a random content security policy nonce.

string
getNonce()

Returns the content security policy nonce.

string
buildValue()

Builds the "Content-Security-Policy" header value.

assignNonceViewVariable()

Assigns a global view variable containing the content security policy nonce.

Response
execute(Request $request, Response $response, Closure $next)

Executes the middleware.

Details

at line 78
__construct(Container $container)

Constructor.

Parameters

Container $container Container

at line 88
protected string buildReportToValue()

Builds the "Report-To" header value.

Return Value

string

at line 105
protected string generateNonce()

Generates a random content security policy nonce.

Return Value

string

at line 115
protected string getNonce()

Returns the content security policy nonce.

Return Value

string

at line 130
protected string buildValue()

Builds the "Content-Security-Policy" header value.

Return Value

string

at line 172
protected assignNonceViewVariable()

Assigns a global view variable containing the content security policy nonce.

at line 183
Response execute(Request $request, Response $response, Closure $next)

Executes the middleware.

Parameters

Request $request Request
Response $response Response
Closure $next Next layer

Return Value

Response