[Summary view] [Print] [Text view]

   1  <?php
   2  
   3  namespace dokuwiki\HTTP;
   4  
   5  /**
   6   * Utilities to send HTTP Headers
   7   */
   8  class Headers
   9  {
  10      /**
  11       * Send a Content-Security-Polica Header
  12       *
  13       * Expects an associative array with individual policies and their values
  14       *
  15       * @param array $policy
  16       */
  17      public static function contentSecurityPolicy($policy)
  18      {
  19          foreach ($policy as $key => $values) {
  20              // if the value is not an array, we also accept newline terminated strings
  21              if (!is_array($values)) $values = explode("\n", $values);
  22              $values = array_map('trim', $values);
  23              $values = array_unique($values);
  24              $values = array_filter($values);
  25              $policy[$key] = $values;
  26          }
  27  
  28          $cspheader = 'Content-Security-Policy:';
  29          foreach ($policy as $key => $values) {
  30              if ($values) {
  31                  $cspheader .= " $key " . implode(' ', $values) . ';';
  32              } else {
  33                  $cspheader .= " $key;";
  34              }
  35          }
  36  
  37          header($cspheader);
  38      }
  39  }