From 6f063abb2c946f00e9f803c750588b2396703c9b Mon Sep 17 00:00:00 2001
From: Alex Skrypnyk <alex@drevops.com>
Date: Thu, 17 Oct 2024 08:33:38 +1100
Subject: [PATCH] [#1421] Added SecKit module.

---
 composer.json                                       |  1 +
 tests/phpunit/Drupal/EnvironmentSettingsTest.php    |  2 ++
 .../default/includes/modules/settings.seckit.php    | 13 +++++++++++++
 3 files changed, 16 insertions(+)
 create mode 100644 web/sites/default/includes/modules/settings.seckit.php

diff --git a/composer.json b/composer.json
index 11cde76b0..7d28983b4 100644
--- a/composer.json
+++ b/composer.json
@@ -20,6 +20,7 @@
         "drupal/redis": "^1.8",
         "drupal/search_api": "^1.35",
         "drupal/search_api_solr": "^4.3",
+        "drupal/seckit": "^2.0",
         "drupal/shield": "^1.8",
         "drupal/stage_file_proxy": "^2.1",
         "drush/drush": "^13",
diff --git a/tests/phpunit/Drupal/EnvironmentSettingsTest.php b/tests/phpunit/Drupal/EnvironmentSettingsTest.php
index cfdfc0f3b..d31944064 100644
--- a/tests/phpunit/Drupal/EnvironmentSettingsTest.php
+++ b/tests/phpunit/Drupal/EnvironmentSettingsTest.php
@@ -347,6 +347,7 @@ public function testEnvironmentLocal(): void {
     $config['system.performance']['cache']['page']['max_age'] = 900;
     $config['system.performance']['css']['preprocess'] = 1;
     $config['system.performance']['js']['preprocess'] = 1;
+    $config['seckit.settings']['seckit_xss']['csp']['checkbox'] = FALSE;
     $this->assertConfig($config);
 
     $settings['config_exclude_modules'] = [];
@@ -392,6 +393,7 @@ public function testEnvironmentCi(): void {
     $config['system.performance']['cache']['page']['max_age'] = 900;
     $config['system.performance']['css']['preprocess'] = 1;
     $config['system.performance']['js']['preprocess'] = 1;
+    $config['seckit.settings']['seckit_xss']['csp']['checkbox'] = FALSE;
     $this->assertConfig($config);
 
     $settings['config_exclude_modules'] = [];
diff --git a/web/sites/default/includes/modules/settings.seckit.php b/web/sites/default/includes/modules/settings.seckit.php
new file mode 100644
index 000000000..eac6dec87
--- /dev/null
+++ b/web/sites/default/includes/modules/settings.seckit.php
@@ -0,0 +1,13 @@
+<?php
+
+/**
+ * @file
+ * Seckit settings.
+ */
+
+declare(strict_types=1);
+
+if ($settings['environment'] == ENVIRONMENT_CI || $settings['environment'] == ENVIRONMENT_LOCAL) {
+  // Disable SCP locally and in CI as we do not serve the site over HTTPS.
+  $config['seckit.settings']['seckit_xss']['csp']['checkbox'] = FALSE;
+}