class Csp implements Arrayable

Methods

__construct(array|null $connectDomains = null, array|null $resourceDomains = null, array|null $frameDomains = null, array|null $baseUriDomains = null)

Create an application content security policy.

static Csp
make()

Create a new content security policy.

Csp
connectDomains(array $domains)

Set the allowed connection domains.

Csp
resourceDomains(array $domains)

Set the allowed resource domains.

Csp
frameDomains(array $domains)

Set the allowed frame domains.

Csp
baseUriDomains(array $domains)

Set the allowed base URI domains.

array
toArray()

Convert the policy to an array.

Details

at line 22
__construct(array|null $connectDomains = null, array|null $resourceDomains = null, array|null $frameDomains = null, array|null $baseUriDomains = null)

Create an application content security policy.

Parameters

array|null $connectDomains

domains the app may connect to via fetch, XHR, or WebSocket (CSP connect-src)

array|null $resourceDomains

domains the app may load images, scripts, styles, and fonts from (CSP img-src, script-src, style-src, and font-src)

array|null $frameDomains

domains the app may embed as nested iframes (CSP frame-src)

array|null $baseUriDomains

allowed URLs for the document's base element (CSP base-uri)

at line 33
static Csp make()

Create a new content security policy.

Return Value

Csp

at line 43
Csp connectDomains(array $domains)

Set the allowed connection domains.

Parameters

array $domains

Return Value

Csp

at line 55
Csp resourceDomains(array $domains)

Set the allowed resource domains.

Parameters

array $domains

Return Value

Csp

at line 67
Csp frameDomains(array $domains)

Set the allowed frame domains.

Parameters

array $domains

Return Value

Csp

at line 79
Csp baseUriDomains(array $domains)

Set the allowed base URI domains.

Parameters

array $domains

Return Value

Csp

at line 91
array toArray()

Convert the policy to an array.

Return Value

array