rex_response um Nonce Generator ergänzt (#5510)

redaxo · Jan 12, 2023 · eb9f48c · eb9f48c
1 parent 4bf1c63
commit eb9f48c
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/redaxo/src/core/lib/response.php b/redaxo/src/core/lib/response.php
@@ -34,6 +34,8 @@ class rex_response
     private static $additionalHeaders = [];
     /** @var array */
     private static $preloadFiles = [];
+    /** @var string */
+    private static $nonce = '';
 
     /**
      * Sets the HTTP Status code.
@@ -62,6 +64,17 @@ public static function getStatus()
         return self::$httpStatus;
     }
 
+    /**
+     * Returns a request save NONCE für CSP Headers and Implemntations.
+     */
+    public static function getNonce(): string
+    {
+        if (!self::$nonce) {
+            self::$nonce = bin2hex(random_bytes(16));
+        }
+        return self::$nonce;
+    }
+
     /**
      * Set a http response header. A existing header with the same name will be overridden.
      *