github.com/google/go-safeweb@v0.0.0-20231219055052-64d8cfc90fbb/safehttp/plugins/csp/internalunsafecsp/unsafecspfortests/unsafecspfortests.go (about)

     1  // Copyright 2022 Google LLC
     2  //
     3  // Licensed under the Apache License, Version 2.0 (the "License");
     4  // you may not use this file except in compliance with the License.
     5  // You may obtain a copy of the License at
     6  //
     7  //	https://www.apache.org/licenses/LICENSE-2.0
     8  //
     9  // Unless required by applicable law or agreed to in writing, software
    10  // distributed under the License is distributed on an "AS IS" BASIS,
    11  // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    12  // See the License for the specific language governing permissions and
    13  // limitations under the License.
    14  
    15  // Package unsafecspfortests can be used to disable CSP on specific handler registration in tests.
    16  //
    17  // This package should only be used in tests.
    18  package unsafecspfortests
    19  
    20  import "github.com/google/go-safeweb/safehttp/plugins/csp/internalunsafecsp"
    21  
    22  type endlessAReader struct{}
    23  
    24  func (endlessAReader) Read(b []byte) (int, error) {
    25  	for i := range b {
    26  		b[i] = 41
    27  	}
    28  	return len(b), nil
    29  }
    30  
    31  // UseStaticRandom will make all nonces assume a static value.
    32  func UseStaticRandom() {
    33  	internalunsafecsp.RandReader = endlessAReader{}
    34  }
    35  
    36  // DisableStrict completely disables Strict CSP.
    37  func DisableStrict() internalunsafecsp.DisableStrict {
    38  	return internalunsafecsp.DisableStrict{SkipReports: true}
    39  }
    40  
    41  // DisableTrustedTypes completely disables TrustedTypes
    42  func DisableTrustedTypes() internalunsafecsp.DisableTrustedTypes {
    43  	return internalunsafecsp.DisableTrustedTypes{SkipReports: true}
    44  }