ContentSecurityManager.php

Go to the documentation of this file.

<?php
namespace Ubiquity\security\csp;
 
use Ubiquity\utils\http\URequest;
 
class ContentSecurityManager {
 
    private static NonceGenerator $nonceGenerator;
 
    private static array $csp = [];
 
    private static bool $reportOnly;
 
    private static string $hashAlgo = 'sha256';
 
    private static $onGenerate;
 
    public static function start(string $nonceGeneratorClass = null, bool $reportOnly = false, ?callable $onGenerate = null): void {
        $nonceGeneratorClass ??= NonceGenerator::class;
        self::$onGenerate = $onGenerate;
        self::$nonceGenerator = new $nonceGeneratorClass($onGenerate);
        self::$reportOnly = $reportOnly;
    }
 
    public static function getNonce(string $name): string {
        return self::$nonceGenerator->getNonce($name);
    }
 
    public static function getHash(string $name, string $code, string $algo = 'sha256'): string {
        $code = \preg_replace('/\r\n/', '\n', $code);
        $hash = \base64_encode(\hash($algo, $code, true));
        $hash = "$algo-$hash";
        if (isset(self::$onGenerate) && ! URequest::isAjax()) {
            $onG = self::$onGenerate;
            $onG($name, $hash, $algo);
        }
        return $hash;
    }
 
    public static function hasNonce(string $name): bool {
        if (isset(self::$nonceGenerator)) {
            return self::$nonceGenerator->hasNonce($name);
        }
        return false;
    }
 
    public static function isStarted(): bool {
        return isset(self::$nonceGenerator);
    }
 
    public static function addCsp(?bool $reportOnly = null): ContentSecurity {
        return self::$csp[] = new ContentSecurity($reportOnly ?? self::$reportOnly);
    }
 
    public static function defaultCsp(?bool $reportOnly = null): ContentSecurity {
        return self::$csp['default'] ??= new ContentSecurity($reportOnly ?? self::$reportOnly);
    }
 
    public static function clearCsp(): void {
        self::$csp = [];
    }
 
    public static function defaultUbiquity(?bool $reportOnly = null): ContentSecurity {
        return self::$csp['defaultUbiquity'] ??= ContentSecurity::defaultUbiquity()->reportOnly($reportOnly);
    }
 
    public static function defaultUbiquityDebug(?bool $reportOnly = null, string $livereloadServer = '127.0.0.1:35729'): ContentSecurity {
        return self::$csp['defaultUbiquity'] ??= ContentSecurity::defaultUbiquityDebug($livereloadServer)->reportOnly($reportOnly);
    }
 
    public static function addHeadersToResponse(?bool $reportOnly = null): void {
        $reportOnly ??= self::$reportOnly;
        foreach (self::$csp as $csp) {
            $csp->addHeaderToResponse($reportOnly);
        }
    }
 
    public static function getNonceGenerator(): NonceGenerator {
        return self::$nonceGenerator;
    }
 
    public static function getCsp(): array {
        return self::$csp;
    }
 
    public static function isReportOnly(): bool {
        return self::$reportOnly;
    }
 
    public static function getHashAlgo(): string {
        return ContentSecurityManager::$hashAlgo;
    }
 
    public static function setHashAlgo(string $hashAlgo) {
        ContentSecurityManager::$hashAlgo = $hashAlgo;
    }
 
    public static function setOnGenerate(callable $onGenerate) {
        ContentSecurityManager::$onGenerate = $onGenerate;
    }
}