appwrite/src/Appwrite/Functions/Validator/Headers.php

<?php

namespace Appwrite\Functions\Validator;

use Utopia\Validator;

/**
 * Headers.
 *
 * Validates user provided headers
 */
class Headers extends Validator
{
    protected bool $allowEmpty;

    public function __construct(bool $allowEmpty = true)
    {
        $this->allowEmpty = $allowEmpty;
    }

    /**
     * Get Description.
     *
     * Returns validator description
     *
     * @return string
     */
    public function getDescription(): string
    {
        return 'Invalid header format. Header keys can only contain alphanumeric characters, underscores, and hyphens. Header keys cannot start with "x-appwrite-" prefix.';
    }

    /**
     * Is valid.
     *
     * @param mixed $value
     *
     * @return bool
     */
    public function isValid($value): bool
    {
        if ($this->allowEmpty && empty($value)) {
            return true;
        }

        if (!\is_array($value)) {
            return false;
        }

        if (\is_array($value)) {
            foreach ($value as $key => $val) {
                $length = \strlen($key);
                // Reject non-string keys
                if (!\is_string($key) || $length === 0) {
                    return false;
                }

                // Check first and last character
                if (!ctype_alnum($key[0]) || !ctype_alnum($key[$length - 1])) {
                    return false;
                }

                // Check middle characters
                for ($i = 1; $i < $length - 1; $i++) {
                    if (!ctype_alnum($key[$i]) && $key[$i] !== '-') {
                        return false;
                    }
                }

                // Check for x-appwrite- prefix
                if (str_starts_with($key, 'x-appwrite-')) {
                    return false;
                }
            }
            return true;
        }
        return false;
    }

    /**
     * Is array
     *
     * Function will return true if object is array.
     *
     * @return bool
     */
    public function isArray(): bool
    {
        return false;
    }

    /**
     * Get Type
     *
     * Returns validator type.
     *
     * @return string
     */
    public function getType(): string
    {
        return self::TYPE_OBJECT;
    }
}