the-djmaze/snappymail
1
1
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2024-09-20 15:45:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

Improved Sec-Fetch

Browse source 
See https://github.com/the-djmaze/snappymail/issues/99#issuecomment-879702411
This commit is contained in:
djmaze 2021-07-14 10:29:23 +02:00
parent e73e81664f
commit d85cc9a79f
1 changed files with 9 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
snappymail/v/0.0.0/app/libraries/snappymail/http/secfetch.php
View file

@ -50,7 +50,7 @@ abstract class SecFetch
*/
public static function dest(string $type) : bool
{
return $type == ($_SERVER['HTTP_SEC_FETCH_DEST'] ?? 'document');
return $type === ($_SERVER['HTTP_SEC_FETCH_DEST'] ?? 'document');
}
/**
@ -67,7 +67,7 @@ abstract class SecFetch
*/
public static function mode(string $type) : bool
{
return $type == ($_SERVER['HTTP_SEC_FETCH_MODE'] ?? 'navigate');
return $type === ($_SERVER['HTTP_SEC_FETCH_MODE'] ?? 'navigate');
}
/**
@ -85,12 +85,12 @@ abstract class SecFetch
*/
public static function site(string $type) : bool
{
return $type == ($_SERVER['HTTP_SEC_FETCH_SITE'] ?? 'none');
return $type === ($_SERVER['HTTP_SEC_FETCH_SITE'] ?? 'none');
}
public static function user() : bool
{
return '?1' == ($_SERVER['HTTP_SEC_FETCH_USER'] ?? '');
return '?1' === ($_SERVER['HTTP_SEC_FETCH_USER'] ?? '');
}
public static function isSameOrigin() : bool
@ -99,10 +99,10 @@ abstract class SecFetch
return true;
}
if ('none' == $_SERVER['HTTP_SEC_FETCH_SITE']) {
// sec-fetch-dest: document
// sec-fetch-mode: navigate
return static::user();
if (static::user()) {
return static::dest('document')
&& static::mode('navigate')
&& 'GET' === $_SERVER['REQUEST_METHOD'];
}
/**
@ -116,7 +116,7 @@ abstract class SecFetch
sec-fetch-dest: document
sec-fetch-mode: navigate
*/
return 'same-origin' == $_SERVER['HTTP_SEC_FETCH_SITE'];
return 'same-origin' === $_SERVER['HTTP_SEC_FETCH_SITE'];
}
}