inc/HTTP/Headers.php


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

<?php

namespace dokuwiki\HTTP;

/**
 * Utilities to send HTTP Headers
 */
class Headers
{
    /**
     * Send a Content-Security-Polica Header
     *
     * Expects an associative array with individual policies and their values
     *
     * @param array $policy
     */
    public static function contentSecurityPolicy($policy)
    {
        foreach ($policy as $key => $values) {
            // if the value is not an array, we also accept newline terminated strings
            if (!is_array($values)) $values = explode("\n", $values);
            $values = array_map('trim', $values);
            $values = array_unique($values);
            $values = array_filter($values);
            $policy[$key] = $values;
        }

        $cspheader = 'Content-Security-Policy:';
        foreach ($policy as $key => $values) {
            if ($values) {
                $cspheader .= " $key " . implode(' ', $values) . ';';
            } else {
                $cspheader .= " $key;";
            }
        }

        header($cspheader);
    }
}