WhiteListUrlValidator.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
namespace ILIAS\AuthApache;
 
final readonly class WhiteListUrlValidator
{
    private array $whitelist;
 
    public function __construct(private string $url, array $whitelist)
    {
        $this->whitelist = array_filter(array_map(static function (string $domain): string {
            return trim($domain);
        }, $whitelist));
    }
 
    private function isValidHost(string $host): bool
    {
        foreach ($this->whitelist as $valid_host) {
            if ($host === $valid_host) {
                return true;
            }
 
            if (!str_starts_with($valid_host, '.')) {
                $valid_host = '.' . $valid_host;
            }
 
            if ((\strlen($host) > \strlen($valid_host)) && substr(
                $host,
                (0 - \strlen($valid_host))
            ) === $valid_host) {
                return true;
            }
        }
 
        return false;
    }
 
    public function isValid(): bool
    {
        $host = parse_url($this->url, PHP_URL_HOST);
        if ($host === null) {
            return false;
        }
 
        return $this->isValidHost($host);
    }
}