1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
use serde_json::error;

#[macro_use]
extern crate serde_derive;

pub mod config;
mod directives;
mod domains;
mod parse;

pub struct Csp {
    pub header: String,
    pub csp: String,
}

pub trait GetDirectives {
    fn get_directives(&self) -> Vec<String>;
}

fn generate_csp(header: String, csp: String) -> Csp {
    Csp { header, csp }
}

fn parse_csp_result(header: String, result: Result<String, error::Error>) -> Csp {
    match result {
        Ok(result) => generate_csp(header, result),
        Err(e) => panic!("Could not parse JSON: {}", e),
    }
}

pub fn enforce(directives: impl GetDirectives, json: &str) -> Csp {
    parse_csp_result(
        String::from("Content-Security-Policy"),
        directives::build(directives, json),
    )
}

pub fn report_only(directives: impl GetDirectives, json: &str) -> Csp {
    parse_csp_result(
        String::from("Content-Security-Policy-Report-Only"),
        directives::build(directives, json),
    )
}

pub fn csp_only(directives: impl GetDirectives, json: &str) -> String {
    parse_csp_result(
        String::from("Content-Security-Policy"),
        directives::build(directives, json),
    )
    .csp
}

// -----
// Tests
// -----
#[cfg(test)]
mod csp_generator_test {
    #[test]
    fn test_csp_struct() {
        let csp = super::Csp {
            header: String::from("header"),
            csp: String::from("csp"),
        };

        assert_eq!(csp.header, String::from("header"));
        assert_eq!(csp.csp, String::from("csp"));
    }

    #[test]
    fn test_generate_csp() {
        let csp = super::generate_csp(String::from("my header"), String::from("my csp"));

        assert_eq!(csp.header, String::from("my header"));
        assert_eq!(csp.csp, String::from("my csp"));
    }

    #[test]
    fn test_parse_csp_result() {
        let csp = super::parse_csp_result(String::from("CSP"), Ok(String::from("Hello World")));

        assert_eq!(csp.header, String::from("CSP"));
        assert_eq!(csp.csp, String::from("Hello World"));
    }
}