TYPO3 v15 dev-main snapshot ()

2026-08-10 22:31:27 +02:00
commit 44c503b2d1
233 changed files with 31556 additions and 0 deletions
@@ -0,0 +1,43 @@
+<?php
+
+/*
+ * This file is part of the TYPO3 CMS project.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+namespace TYPO3\CMS\Frontend\Cache;
+
+use TYPO3\CMS\Core\Security\ContentSecurityPolicy\ConsumableNonce;
+
+/**
+ * Substitutes a cached nonce value with the actual nonce value that
+ * is valid for the current request, and which is issued as HTTP CSP
+ * header during the frontend rendering process.
+ */
+class NonceValueSubstitution
+{
+    /**
+     * @param array{content: string, nonce: string} $context
+     */
+    public function substituteNonce(array $context): ?string
+    {
+        $currentNonce = $GLOBALS['TYPO3_REQUEST']?->getAttribute('nonce');
+        if (!$currentNonce instanceof ConsumableNonce
+            || empty($context['content'])
+            || empty($context['nonce'])
+            || $currentNonce->value === $context['nonce']
+            || !str_contains($context['content'], $context['nonce'])
+        ) {
+            return null;
+        }
+        return str_replace($context['nonce'], $currentNonce->consumeInline(self::class), $context['content']);
+    }
+}