TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider Class Reference

Public Member Functions
	__construct (private readonly RequestId $requestId, private readonly SiteFinder $siteFinder, private readonly PolicyRegistry $policyRegistry, private readonly EventDispatcherInterface $eventDispatcher, private readonly MutationRepository $mutationRepository, private readonly BackendEntryPointResolver $backendEntryPointResolver,)
	provideFor (Scope $scope)
	getReportingUrlFor (Scope $scope, ServerRequestInterface $request)
	getDefaultReportingUriBase (Scope $scope, ServerRequestInterface $request, bool $absolute=true)

Protected Attributes
const	REPORTING_URI = '@http-reporting'

Private Member Functions
	resolveSite (Scope $scope)

Detailed Description

Provide a Content-Security-Policy representation for a given scope (e.g. backend, frontend, frontend.my-site).

Definition at line 37 of file PolicyProvider.php.

Constructor & Destructor Documentation

__construct()

TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider::__construct	(	private readonly RequestId	$requestId,
		private readonly SiteFinder	$siteFinder,
		private readonly PolicyRegistry	$policyRegistry,
		private readonly EventDispatcherInterface	$eventDispatcher,
		private readonly MutationRepository	$mutationRepository,
		private readonly BackendEntryPointResolver	$backendEntryPointResolver
	)

Definition at line 41 of file PolicyProvider.php.

Member Function Documentation

getDefaultReportingUriBase()

TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider::getDefaultReportingUriBase	(	Scope	$scope,
		ServerRequestInterface	$request,
		bool	$absolute = true
	)

Returns the URI base, for better partitioning it should be extended by &requestTime=...

Definition at line 93 of file PolicyProvider.php.

References TYPO3\CMS\Core\Http\NormalizedParams\createFromRequest(), TYPO3\CMS\Core\Site\Entity\SiteLanguage\getBase(), TYPO3\CMS\Core\Security\ContentSecurityPolicy\Scope\isFrontendSite(), and TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider\resolveSite().

Referenced by TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider\getReportingUrlFor().

getReportingUrlFor()

TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider::getReportingUrlFor	(	Scope	$scope,
		ServerRequestInterface	$request
	)

Definition at line 76 of file PolicyProvider.php.

References $GLOBALS, and TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider\getDefaultReportingUriBase().

provideFor()

TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider::provideFor

(

Scope

$scope

)

Provides the complete, dynamically mutated policy to be used in HTTP responses.

Definition at line 53 of file PolicyProvider.php.

resolveSite()

TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider::resolveSite ( Scope  $scope )

private

Definition at line 126 of file PolicyProvider.php.

Referenced by TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider\getDefaultReportingUriBase().

Member Data Documentation

REPORTING_URI

const TYPO3\CMS\Core\Security\ContentSecurityPolicy\PolicyProvider::REPORTING_URI = '@http-reporting'

protected

Definition at line 39 of file PolicyProvider.php.