add_filter about wordpress-csp-manager HOT 2 OPEN

/**
 * Determines if the CSP Manager is preparing to output HTTP Headers.
 *
 * Uses a PHP backtrace to locate calls from {@see \CSP_Manager\Core::csp_init()}.
 */
function is_csp_manager_doing_http_headers(): bool {
	foreach ( debug_backtrace( DEBUG_BACKTRACE_IGNORE_ARGS, 6 ) as $call ) {
		if (
			isset( $call['function'], $call['class'] ) &&
			'csp_init' === $call['function'] &&
			'CSP_Manager\Core' === $call['class']
		) {
			return true;
		}
	}

	return false;
}

/**
 * Customizes the CSP Manager policies to include
 * the staging environment for remote assets.
 *
 * @listens filter:option_csp_manager_admin
 * @listens filter:option_csp_manager_loggedin
 * @listens filter:option_csp_manager_frontend
 *
 * @param  mixed  $settings The CSP directives, policies, and options.
 * @return mixed
 */
function filter_csp_manager_customize_settings( mixed $settings ): mixed {
	if (
		$settings === false ||
		! isset( $settings['mode'] ) ||
		'disabled' === $settings['mode'] ||
		! is_csp_manager_doing_http_headers()
	) {
		return $settings;
	}

	$directives = [
		'img-src' => 'https://example.com',
	];

	foreach ( $directives as $directive => $policy ) {
		if (
			isset( $settings[ 'enable_' . $directive ] ) &&
			$settings[ 'enable_' . $directive ]
		) {
			$settings[ $directive ] = (
				isset( $settings[ $directive ] )
				? $settings[ $directive ] . ' '
				: ''
			) . $policy;
		}
	}

	return $settings;
}

add_action( 'option_csp_manager_admin',    'filter_csp_manager_customize_settings', 10, 1 );
add_action( 'option_csp_manager_loggedin', 'filter_csp_manager_customize_settings', 10, 1 );
add_action( 'option_csp_manager_frontend', 'filter_csp_manager_customize_settings', 10, 1 );