src/Framework/Security/ContentSecurityPolicy/Computer/PageScriptCSPComputer.php line 25

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Framework\Security\ContentSecurityPolicy\Computer;
  7. use App\Repository\GoogleTagManagerRepository;
  9. class PageScriptCSPComputer
  10. {
  11.     public function __construct(
  12.         private readonly GoogleTagManagerRepository $tagManagerRepository,
  13.     ) {
  14.     }
  16.     public function computeShaSet(): array
  17.     {
  18.         $hashAlgos = ['sha256', 'sha384', 'sha512'];
  19.         $supportedAlgos = array_filter($hashAlgos, fn (string $algo) => \in_array($algo, hash_algos(), true));
  20.         $usedAlgo = reset($supportedAlgos);
  21.         if (false === $usedAlgo) {
  22.             return [];
  23.         }
  24.         $shaSet = [];
  25.         $scripts = $this->tagManagerRepository->getAllScripts();
  26.         foreach ($scripts as $script) {
  27.             $htmlScript = (string) $script->getScript();
  28.             if (1 !== preg_match_all('/<script[^>]*+>/i', $htmlScript)) {
  29.                 continue;
  30.             }
  32.             preg_match('/^\s*+<script[^>]*+>(?<script>((?s).*))<\/script>\s*+$/i', $htmlScript, $matches);
  34.             if (
  35.                 !\array_key_exists('script', $matches)
  36.                 || !\is_string($matches['script'])
  37.                 || '' === $matches['script']) {
  38.                 continue;
  39.             }
  41.             $hash = hash($usedAlgo, $matches[1], true);
  42.             $shaSet[] = sprintf('%s-%s', $usedAlgo, base64_encode($hash));
  43.         }
  45.         return $shaSet;
  46.     }
  47. }