src/Framework/Security/ContentSecurityPolicy/EventSubscriber/ScriptNonceSubscriber.php line 23

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Framework\Security\ContentSecurityPolicy\EventSubscriber;
  7. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  8. use Symfony\WebpackEncoreBundle\Event\RenderAssetTagEvent;
  10. class ScriptNonceSubscriber implements EventSubscriberInterface
  11. {
  12.     public function __construct(protected readonly ContentSecurityPolicyListener $listener)
  13.     {
  14.     }
  16.     public static function getSubscribedEvents(): array
  17.     {
  18.         return [
  19.             RenderAssetTagEvent::class => 'addNonceToTags',
  20.         ];
  21.     }
  23.     public function addNonceToTags(RenderAssetTagEvent $event): void
  24.     {
  25.         $event->setAttribute('nonce', $this->listener->getNonce());
  26.     }
  27. }