Merge pull request #7 from sansecio/filter-headers

filter request headers
sansecio · Feb 13, 2025 · e06c650 · e06c650
2 parents ee12bfa + 9a575a2
commit e06c650
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 2 deletions.
diff --git a/Model/Report.php b/Model/Report.php
@@ -24,18 +24,32 @@ class Report
     /** @var IP */
     private $ip;
 
+    /** @var string[] */
+    private $filteredHeaders;
+
     public function __construct(
         Config $config,
         CurlFactory $curlFactory,
         Logger $logger,
         SerializerInterface $serializer,
-        IP $ip
+        IP $ip,
+        array $filteredHeaders = []
     ) {
         $this->config = $config;
         $this->curlFactory = $curlFactory;
         $this->logger = $logger;
         $this->serializer = $serializer;
         $this->ip = $ip;
+        $this->filteredHeaders = $filteredHeaders;
+    }
+
+    private function getRequestHeaders(RequestInterface $request): array
+    {
+        $headers = $request->getHeaders()->toArray();
+        foreach ($this->filteredHeaders as $filteredHeader) {
+            unset($headers[$filteredHeader]);
+        }
+        return $headers;
     }
 
     public function sendReport(RequestInterface $request, array $rules)
@@ -57,7 +71,7 @@ public function sendReport(RequestInterface $request, array $rules)
                     'path' => $request->getRequestUri(),
                     'body' => $request->getContent(),
                     'ips' => $this->ip->collectRequestIPs(),
-                    'headers' => $request->getHeaders()->toArray(),
+                    'headers' => $this->getRequestHeaders($request),
                     'scheme' => $request->getScheme(),
                 ]
             ]);

diff --git a/etc/di.xml b/etc/di.xml
@@ -35,4 +35,12 @@
             </argument>
         </arguments>
     </type>
+    <type name="Sansec\Shield\Model\Report">
+        <arguments>
+            <argument name="filteredHeaders" xsi:type="array">
+                <item name="Cookie" xsi:type="string">Cookie</item>
+                <item name="Authorization" xsi:type="string">Authorization</item>
+            </argument>
+        </arguments>
+    </type>
 </config>