aboutsummaryrefslogtreecommitdiffstats
path: root/includes/Hook/ContentSecurityPolicyScriptSourceHook.php
blob: cc1f2693e8351a53eb7cc6614fa07d4aba7c39a0 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
<?php

namespace MediaWiki\Hook;

/**
 * This is a hook handler interface, see docs/Hooks.md.
 * Use the hook name "ContentSecurityPolicyScriptSource" to register handlers implementing this interface.
 *
 * @stable to implement
 * @ingroup Hooks
 */
interface ContentSecurityPolicyScriptSourceHook {
	/**
	 * Use this hook to modify the allowed CSP script sources.
	 * Note that you also have to use ContentSecurityPolicyDefaultSource if you
	 * want non-script sources to be loaded from whatever you add.
	 *
	 * @since 1.35
	 *
	 * @param string[] &$scriptSrc Array of CSP directives
	 * @param array $policyConfig Current configuration for the CSP header
	 * @param int $mode ContentSecurityPolicy::REPORT_ONLY_MODE or
	 *   ContentSecurityPolicy::FULL_MODE depending on type of header
	 * @return bool|void True or no return value to continue or false to abort
	 */
	public function onContentSecurityPolicyScriptSource( &$scriptSrc,
		$policyConfig, $mode
	);
}