class.ilDelegatingHandler.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

use Whoops\Handler\Handler;
use Whoops\Handler\HandlerInterface;

final class ilDelegatingHandler extends Handler
{
    private ?HandlerInterface $current_handler = null;

    public function __construct(
        private readonly ilErrorHandling $error_handling,
        private readonly array $sensitive_data = []
    ) {
    }

    private function hideSensitiveData(array $key_value_pairs): array
    {
        foreach ($key_value_pairs as $key => &$value) {
            if (is_array($value)) {
                $value = $this->hideSensitiveData($value);
            }

            if (is_string($value) && in_array($key, $this->sensitive_data, true)) {
                $value = 'REMOVED FOR SECURITY';
            }

            if ($key === 'PHPSESSID' && is_string($value)) {
                $value = substr($value, 0, 5) . ' (SHORTENED FOR SECURITY)';
            }

            if ($key === 'HTTP_COOKIE') {
                $cookie_content = explode(';', $value);
                foreach ($cookie_content as &$cookie_pair_string) {
                    $cookie_pair = explode('=', $cookie_pair_string);
                    if (trim($cookie_pair[0]) === session_name()) {
                        $cookie_pair[1] = substr($cookie_pair[1], 0, 5) . ' (SHORTENED FOR SECURITY)';
                        $cookie_pair_string = implode('=', $cookie_pair);
                    }
                }
                $value = implode(';', $cookie_content);
            }
        }

        return $key_value_pairs;
    }

    public function handle(): ?int
    {
        if (defined("IL_INITIAL_WD")) {
            chdir(IL_INITIAL_WD);
        }

        /* We must cast the superglobals back to normal arrays since the error handler needs them. They were replaced by
           SuperGlobalDropInReplacement . The keys contain NULL bytes, so accessing values directly by key is not
           really possible */
        $_GET = $this->hideSensitiveData((array) $_GET);
        $_POST = $this->hideSensitiveData((array) $_POST);
        $_COOKIE = $this->hideSensitiveData((array) $_COOKIE);
        $_REQUEST = $this->hideSensitiveData((array) $_REQUEST);

        $_SERVER = $this->hideSensitiveData($_SERVER);

        $this->current_handler = $this->error_handling->getHandler();
        $this->current_handler->setRun($this->getRun());
        $this->current_handler->setException($this->getException());
        $this->current_handler->setInspector($this->getInspector());
        return $this->current_handler->handle();
    }

    public function contentType(): ?string
    {
        if ($this->current_handler === null ||
            !method_exists($this->current_handler, 'contentType')) {
            return null;
        }

        return $this->current_handler->contentType();
    }
}