class.ilWhiteListUrlValidator.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
final readonly class ilWhiteListUrlValidator
{
    private array $whitelist;
 
    public function __construct(private string $url, array $whitelist)
    {
        $this->whitelist = array_filter(array_map(static function (string $domain): string {
            return trim($domain); // Used for trimming and type validation (strict primitive type hint)
        }, $whitelist));
    }
 
    private function isValidDomain(string $domain): bool
    {
        foreach ($this->whitelist as $validDomain) {
            if ($domain === $validDomain) {
                return true;
            }
 
            $firstChar = $validDomain[0];
            if ('.' !== $firstChar) {
                $validDomain = '.' . $validDomain;
            }
 
            if ((strlen($domain) > strlen($validDomain)) && substr(
                $domain,
                (0 - strlen($validDomain))
            ) === $validDomain) {
                return true;
            }
        }
 
        return false;
    }
 
    public function isValid(): bool
    {
        $redirectDomain = parse_url($this->url, PHP_URL_HOST);
        if (null === $redirectDomain) {
            return false;
        }
 
        return $this->isValidDomain($redirectDomain);
    }
}