Merge pull request #67 from blat/2.16.x

Allows require-trusted-types-for CSP directive
laminas · Aug 17, 2022 · e36d423 · e36d423
1 parent 261f079
commit e36d423
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/composer.json b/composer.json
@@ -17,6 +17,9 @@
         "forum": "https://discourse.laminas.dev"
     },
     "config": {
+        "allow-plugins": {
+            "dealerdirect/phpcodesniffer-composer-installer": true
+        },
         "sort-packages": true
     },
     "require": {

diff --git a/src/Header/ContentSecurityPolicy.php b/src/Header/ContentSecurityPolicy.php
@@ -62,6 +62,7 @@ class ContentSecurityPolicy implements MultipleHeaderInterface
         // Other directives
         'block-all-mixed-content',
         'require-sri-for',
+        'require-trusted-types-for',
         'trusted-types',
         'upgrade-insecure-requests',
     ];

diff --git a/test/Header/ContentSecurityPolicyTest.php b/test/Header/ContentSecurityPolicyTest.php
@@ -217,6 +217,7 @@ public static function validDirectives(): array
             // Other directives
             ['block-all-mixed-content', [], 'Content-Security-Policy: block-all-mixed-content;'],
             ['require-sri-for', ['script', 'style'], 'Content-Security-Policy: require-sri-for script style;'],
+            ['require-trusted-types-for', ['script'], 'Content-Security-Policy: require-trusted-types-for script;'],
             ['trusted-types', ['*'], 'Content-Security-Policy: trusted-types *;'],
             ['upgrade-insecure-requests', [], 'Content-Security-Policy: upgrade-insecure-requests;'],
         ];