ReferrerEnforcer extends ReferrerEnforcer

Read onlyYes

Treats a referrer as same-origin only if it points into the backend entry point (e.g. `https://example.org/typo3/`) - and not merely to the same host.

Internal

Table of Contents

Constants

TYPE_REFERRER_EMPTY  : int = 1
TYPE_REFERRER_SAME_ORIGIN  : int = 4
TYPE_REFERRER_SAME_SITE  : int = 2

Methods

__construct()  : mixed
handle()  : ResponseInterface|null
resolveAbsoluteWebPath()  : string
resolveReferrerType()  : int
Determines whether the referrer is same-origin (= the very same application), same-site (= the same host, but a different application) or neither of both.
resolveRequestHost()  : string

Constants

TYPE_REFERRER_EMPTY

protected int TYPE_REFERRER_EMPTY = 1

TYPE_REFERRER_SAME_ORIGIN

protected int TYPE_REFERRER_SAME_ORIGIN = 4

TYPE_REFERRER_SAME_SITE

protected int TYPE_REFERRER_SAME_SITE = 2

Methods

handle()

public handle(ServerRequestInterface $request, array<string|int, mixed> $options) : ResponseInterface|null
Parameters
$request : ServerRequestInterface
$options : array<string|int, mixed>
Return values
ResponseInterface|null

resolveAbsoluteWebPath()

protected resolveAbsoluteWebPath(string $target, ServerRequestInterface $request) : string
Parameters
$target : string
$request : ServerRequestInterface
Return values
string

resolveReferrerType()

Determines whether the referrer is same-origin (= the very same application), same-site (= the same host, but a different application) or neither of both.

protected resolveReferrerType(ServerRequestInterface $request) : int

Implementations must not fall back to the request directory to detect same-origin: all applications are served from the same entry script, which would make any same-site referrer appear as same-origin.

Parameters
$request : ServerRequestInterface
Return values
int

resolveRequestHost()

protected resolveRequestHost(ServerRequestInterface $request) : string
Parameters
$request : ServerRequestInterface
Return values
string
On this page

Search results