Make CSP entries unique

This commit is contained in:
the-djmaze 2022-11-06 23:12:01 +01:00
parent 529d727189
commit 0e347625e3

View file

@ -35,20 +35,20 @@ class CSP
function __toString() : string function __toString() : string
{ {
$params = [ $params = [
'base-uri ' . \implode(' ', $this->base), 'base-uri ' . \implode(' ', \array_unique($this->base)),
'default-src ' . \implode(' ', $this->default) 'default-src ' . \implode(' ', \array_unique($this->default))
]; ];
if ($this->script) { if ($this->script) {
$params[] = 'script-src ' . \implode(' ', $this->script); $params[] = 'script-src ' . \implode(' ', \array_unique($this->script));
} }
if ($this->img) { if ($this->img) {
$params[] = 'img-src ' . \implode(' ', $this->img); $params[] = 'img-src ' . \implode(' ', \array_unique($this->img));
} }
if ($this->style) { if ($this->style) {
$params[] = 'style-src ' . \implode(' ', $this->style); $params[] = 'style-src ' . \implode(' ', \array_unique($this->style));
} }
if ($this->frame) { if ($this->frame) {
$params[] = 'frame-src ' . \implode(' ', $this->frame); $params[] = 'frame-src ' . \implode(' ', \array_unique($this->frame));
} }
// Deprecated // Deprecated