Skip to content

Implement Csp #361

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
TheSyscall wants to merge 49 commits into
base: main
Choose a base branch
from
Open

Implement Csp #361

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
49 commits
Select commit Hold shift + click to select a range
69a58f3
Implement Csp
TheSyscall Mar 20, 2026
27441a7
Allow newlines in Csp::fromString
TheSyscall Mar 23, 2026
e397254
Review suggestions
TheSyscall Mar 24, 2026
caf80ca
Specify array type
TheSyscall Mar 24, 2026
5bfa23a
Add isEmpty method that checks if the array of directives is empty
TheSyscall Mar 25, 2026
b418204
Add tests
TheSyscall Mar 25, 2026
2dc848b
Use constation for default-src policies
TheSyscall Apr 1, 2026
723e7e0
Add policy validation and url evaluation
TheSyscall Apr 1, 2026
969b4ce
Remove unnecessary space check
TheSyscall Apr 7, 2026
65054d4
Add more tests
TheSyscall Apr 7, 2026
75e8792
Code style changes
TheSyscall Apr 7, 2026
88fa4b8
Change dataprovider to use attribute
TheSyscall Apr 7, 2026
bdea70c
fixup! make data provider static
TheSyscall Apr 7, 2026
f2788ae
fixup! phpstan changes
TheSyscall Apr 7, 2026
dc28248
fixup! add check to test if path can be extended
TheSyscall Apr 7, 2026
415ddc9
code review suggestions
TheSyscall Apr 9, 2026
cea14f2
rename policy to expression to better match the spec
TheSyscall Apr 9, 2026
914e56a
Allow certain directives to be empty
TheSyscall Apr 9, 2026
2d96c73
fixup! phpcs
TheSyscall Apr 9, 2026
eaa172b
Remove `evaluateUrl`
TheSyscall Apr 16, 2026
a3afc95
Apply suggestions from code review
TheSyscall Apr 17, 2026
8b8181d
Replace isset with ??=
TheSyscall Apr 17, 2026
efc6fd0
Remove extra '' check
TheSyscall Apr 17, 2026
3971336
Test injection
TheSyscall May 26, 2026
3d6f642
Explicitly allow keywords and hashes
TheSyscall May 26, 2026
869aa2b
Check against a set of unquoted keywords
TheSyscall May 26, 2026
3deb2a7
Handle report to directive
TheSyscall May 26, 2026
0586b3d
Correctly merge empty directives
TheSyscall May 26, 2026
1b11285
Tests for merge
TheSyscall May 26, 2026
ed4f366
Handle wildcards correctly
TheSyscall May 26, 2026
8ce4502
Only set nonce if it's actually valid
TheSyscall May 26, 2026
21396d0
Allow multiple spaces for splitting expressions
TheSyscall May 26, 2026
5a17004
fixup! Use nullable types
TheSyscall May 26, 2026
ac1779c
fixup! implement stringable
TheSyscall May 26, 2026
7151985
fixup! order imports
TheSyscall May 26, 2026
4fd8a99
Code style changes
TheSyscall May 26, 2026
6c5eb56
Correctly handle fetch directives
TheSyscall May 26, 2026
2a74ef9
Allow setting the default-src
TheSyscall May 26, 2026
67cab01
fixup! Docstrings and adjust return type
TheSyscall May 26, 2026
7a22751
fixme! add void return type and add missing array type docstrings
TheSyscall May 26, 2026
689f72c
fixme! docstrings
TheSyscall May 26, 2026
b14f22c
Use one str_replace instead of two
TheSyscall May 26, 2026
44baeca
fixup! use list linstead of array
TheSyscall May 26, 2026
9155066
fixup! typo imc to img
TheSyscall May 26, 2026
e5aaec8
fixup! typo
TheSyscall May 26, 2026
4277232
Add comment about atomic add
TheSyscall May 26, 2026
798bd42
fixup! tests
TheSyscall May 26, 2026
6585dec
Make Csp::merge non static
TheSyscall May 27, 2026
12ae5c6
Reorder class members
TheSyscall May 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading