[#1421] Added SecKit module.

drevops · Oct 16, 2024 · 26f5bb3 · 26f5bb3 · github-actions · Oct 16, 2024
1 parent 2c20606
commit 26f5bb3
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 0 deletions.
diff --git a/composer.json b/composer.json
@@ -20,6 +20,7 @@
         "drupal/redis": "^1.8",
         "drupal/search_api": "^1.35",
         "drupal/search_api_solr": "^4.3",
+        "drupal/seckit": "^2.0",
         "drupal/shield": "^1.8",
         "drupal/stage_file_proxy": "^2.1",
         "drush/drush": "^13",

diff --git a/tests/phpunit/Drupal/EnvironmentSettingsTest.php b/tests/phpunit/Drupal/EnvironmentSettingsTest.php
@@ -347,6 +347,7 @@ public function testEnvironmentLocal(): void {
     $config['system.performance']['cache']['page']['max_age'] = 900;
     $config['system.performance']['css']['preprocess'] = 1;
     $config['system.performance']['js']['preprocess'] = 1;
+    $config['seckit.settings']['seckit_xss']['csp']['checkbox'] = FALSE;
     $this->assertConfig($config);
 
     $settings['config_exclude_modules'] = [];
@@ -392,6 +393,7 @@ public function testEnvironmentCi(): void {
     $config['system.performance']['cache']['page']['max_age'] = 900;
     $config['system.performance']['css']['preprocess'] = 1;
     $config['system.performance']['js']['preprocess'] = 1;
+    $config['seckit.settings']['seckit_xss']['csp']['checkbox'] = FALSE;
     $this->assertConfig($config);
 
     $settings['config_exclude_modules'] = [];

diff --git a/web/sites/default/includes/modules/settings.seckit.php b/web/sites/default/includes/modules/settings.seckit.php
@@ -0,0 +1,13 @@
+<?php
+
+/**
+ * @file
+ * Seckit settings.
+ */
+
+declare(strict_types=1);
+
+if ($settings['environment'] == ENVIRONMENT_CI || $settings['environment'] == ENVIRONMENT_LOCAL) {
+  // Disable SCP locally and in CI as we do not serve the site over HTTPS.
+  $config['seckit.settings']['seckit_xss']['csp']['checkbox'] = FALSE;
+}