mirror of
https://github.com/BookStackApp/BookStack.git
synced 2024-08-30 06:02:25 +00:00
![Dan Brown](/assets/img/avatar_default.png)
- Added caching for custom html head parsing to add nonce. - Also moved api docs page into web routes to prevent issues.
63 lines
1.6 KiB
PHP
63 lines
1.6 KiB
PHP
<?php
|
|
|
|
namespace BookStack\Theming;
|
|
|
|
use BookStack\Util\CspService;
|
|
use BookStack\Util\HtmlContentFilter;
|
|
use BookStack\Util\HtmlNonceApplicator;
|
|
use Illuminate\Contracts\Cache\Repository as Cache;
|
|
|
|
class CustomHtmlHeadContentProvider
|
|
{
|
|
/**
|
|
* @var CspService
|
|
*/
|
|
protected $cspService;
|
|
|
|
/**
|
|
* @var Cache
|
|
*/
|
|
protected $cache;
|
|
|
|
public function __construct(CspService $cspService, Cache $cache)
|
|
{
|
|
$this->cspService = $cspService;
|
|
$this->cache = $cache;
|
|
}
|
|
|
|
/**
|
|
* Fetch our custom HTML head content prepared for use on web pages.
|
|
* Content has a nonce applied for CSP.
|
|
*/
|
|
public function forWeb(): string
|
|
{
|
|
$content = $this->getSourceContent();
|
|
$hash = md5($content);
|
|
$html = $this->cache->remember('custom-head-web:' . $hash, 86400, function() use ($content) {
|
|
return HtmlNonceApplicator::prepare($content);
|
|
});
|
|
return HtmlNonceApplicator::apply($html, $this->cspService->getNonce());
|
|
}
|
|
|
|
/**
|
|
* Fetch our custom HTML head content prepared for use in export formats.
|
|
* Scripts are stripped to avoid potential issues.
|
|
*/
|
|
public function forExport(): string
|
|
{
|
|
$content = $this->getSourceContent();
|
|
$hash = md5($content);
|
|
return $this->cache->remember('custom-head-export:' . $hash, 86400, function() use ($content) {
|
|
return HtmlContentFilter::removeScripts($content);
|
|
});
|
|
}
|
|
|
|
/**
|
|
* Get the original custom head content to use.
|
|
*/
|
|
protected function getSourceContent(): string
|
|
{
|
|
return setting('app-custom-head', '');
|
|
}
|
|
|
|
} |