Firesphere/silverstripe-csp-headers

View on GitHub
src/Helpers/CSPConvertor.php

Summary

Maintainability
B
5 hrs
Test Coverage

Function toYml has a Cognitive Complexity of 25 (exceeds 5 allowed). Consider refactoring.
Open

    public static function toYml($response, $return = false)
    {
        $cspHeader = $response->getHeader('content-security-policy') ?? $response->getHeader('content-security-policy-report-only');

        $asArray = explode(';', $cspHeader);
Severity: Minor
Found in src/Helpers/CSPConvertor.php - About 3 hrs to fix

Cognitive Complexity

Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

A method's cognitive complexity is based on a few simple rules:

  • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
  • Code is considered more complex for each "break in the linear flow of the code"
  • Code is considered more complex when "flow breaking structures are nested"

Further reading

Method toYml has 53 lines of code (exceeds 25 allowed). Consider refactoring.
Open

    public static function toYml($response, $return = false)
    {
        $cspHeader = $response->getHeader('content-security-policy') ?? $response->getHeader('content-security-policy-report-only');

        $asArray = explode(';', $cspHeader);
Severity: Major
Found in src/Helpers/CSPConvertor.php - About 2 hrs to fix

    The method toYml() has an NPath complexity of 484. The configured NPath complexity threshold is 200.
    Open

        public static function toYml($response, $return = false)
        {
            $cspHeader = $response->getHeader('content-security-policy') ?? $response->getHeader('content-security-policy-report-only');
    
            $asArray = explode(';', $cspHeader);
    Severity: Minor
    Found in src/Helpers/CSPConvertor.php by phpmd

    NPathComplexity

    Since: 0.1

    The NPath complexity of a method is the number of acyclic execution paths through that method. A threshold of 200 is generally considered the point where measures should be taken to reduce complexity.

    Example

    class Foo {
        function bar() {
            // lots of complicated code
        }
    }

    Source https://phpmd.org/rules/codesize.html#npathcomplexity

    The method toYml() has a Cyclomatic Complexity of 13. The configured cyclomatic complexity threshold is 10.
    Open

        public static function toYml($response, $return = false)
        {
            $cspHeader = $response->getHeader('content-security-policy') ?? $response->getHeader('content-security-policy-report-only');
    
            $asArray = explode(';', $cspHeader);
    Severity: Minor
    Found in src/Helpers/CSPConvertor.php by phpmd

    CyclomaticComplexity

    Since: 0.1

    Complexity is determined by the number of decision points in a method plus one for the method entry. The decision points are 'if', 'while', 'for', and 'case labels'. Generally, 1-4 is low complexity, 5-7 indicates moderate complexity, 8-10 is high complexity, and 11+ is very high complexity.

    Example

    // Cyclomatic Complexity = 11
    class Foo {
    1   public function example() {
    2       if ($a == $b) {
    3           if ($a1 == $b1) {
                    fiddle();
    4           } elseif ($a2 == $b2) {
                    fiddle();
                } else {
                    fiddle();
                }
    5       } elseif ($c == $d) {
    6           while ($c == $d) {
                    fiddle();
                }
    7        } elseif ($e == $f) {
    8           for ($n = 0; $n < $h; $n++) {
                    fiddle();
                }
            } else {
                switch ($z) {
    9               case 1:
                        fiddle();
                        break;
    10              case 2:
                        fiddle();
                        break;
    11              case 3:
                        fiddle();
                        break;
                    default:
                        fiddle();
                        break;
                }
            }
        }
    }

    Source https://phpmd.org/rules/codesize.html#cyclomaticcomplexity

    The method toYml has a boolean flag argument $return, which is a certain sign of a Single Responsibility Principle violation.
    Open

        public static function toYml($response, $return = false)
    Severity: Minor
    Found in src/Helpers/CSPConvertor.php by phpmd

    BooleanArgumentFlag

    Since: 1.4.0

    A boolean flag argument is a reliable indicator for a violation of the Single Responsibility Principle (SRP). You can fix this problem by extracting the logic in the boolean flag into its own class or method.

    Example

    class Foo {
        public function bar($flag = true) {
        }
    }

    Source https://phpmd.org/rules/cleancode.html#booleanargumentflag

    Avoid using static access to class '\Symfony\Component\Yaml\Yaml' in method 'toYml'.
    Open

            $yaml = Yaml::dump($data, 5, 2);
    Severity: Minor
    Found in src/Helpers/CSPConvertor.php by phpmd

    StaticAccess

    Since: 1.4.0

    Static access causes unexchangeable dependencies to other classes and leads to hard to test code. Avoid using static access at all costs and instead inject dependencies through the constructor. The only case when static access is acceptable is when used for factory methods.

    Example

    class Foo
    {
        public function bar()
        {
            Bar::baz();
        }
    }

    Source https://phpmd.org/rules/cleancode.html#staticaccess

    The method toYml() contains an exit expression.
    Open

            exit;
    Severity: Minor
    Found in src/Helpers/CSPConvertor.php by phpmd

    ExitExpression

    Since: 0.2

    An exit-expression within regular code is untestable and therefore it should be avoided. Consider to move the exit-expression into some kind of startup script where an error/exception code is returned to the calling environment.

    Example

    class Foo {
        public function bar($param)  {
            if ($param === 42) {
                exit(23);
            }
        }
    }

    Source https://phpmd.org/rules/design.html#exitexpression

    The property $non_url_args is not named in camelCase.
    Open

    class CSPConvertor
    {
    
        /**
         * @var string[] default values allowed
    Severity: Minor
    Found in src/Helpers/CSPConvertor.php by phpmd

    CamelCasePropertyName

    Since: 0.2

    It is considered best practice to use the camelCase notation to name attributes.

    Example

    class ClassName {
        protected $property_name;
    }

    Source

    The property $non_url_defaults is not named in camelCase.
    Open

    class CSPConvertor
    {
    
        /**
         * @var string[] default values allowed
    Severity: Minor
    Found in src/Helpers/CSPConvertor.php by phpmd

    CamelCasePropertyName

    Since: 0.2

    It is considered best practice to use the camelCase notation to name attributes.

    Example

    class ClassName {
        protected $property_name;
    }

    Source

    The variable $non_url_args is not named in camelCase.
    Open

        public static function toYml($response, $return = false)
        {
            $cspHeader = $response->getHeader('content-security-policy') ?? $response->getHeader('content-security-policy-report-only');
    
            $asArray = explode(';', $cspHeader);
    Severity: Minor
    Found in src/Helpers/CSPConvertor.php by phpmd

    CamelCaseVariableName

    Since: 0.2

    It is considered best practice to use the camelCase notation to name variables.

    Example

    class ClassName {
        public function doSomething() {
            $data_module = new DataModule();
        }
    }

    Source

    There are no issues that match your filters.

    Category
    Status