do not capture itself

ElegantEngineeringTech · Nov 10, 2024 · db94032 · db94032
1 parent 774afb3
commit db94032
Showing 1 changed file with 15 additions and 1 deletion.
diff --git a/src/Sources/RequestHeaderSource.php b/src/Sources/RequestHeaderSource.php
@@ -23,8 +23,22 @@ public function isEmpty(): bool
 
     public static function fromRequest(Request $request): static
     {
+        $referer = $request->header('referer'); // spelling is a known mistake
+
+        if (blank($referer)) {
+            return new static;
+        }
+
+        if (! is_string($referer)) {
+            return new static;
+        }
+
+        if (parse_url($referer, PHP_URL_HOST) === parse_url(url('/'), PHP_URL_HOST)) {
+            return new static;
+        }
+
         return new static(
-            referer: $request->header('referer'), // spelling is a known mistake
+            referer: $referer,
             timestamp: (float) $request->server('REQUEST_TIME')
         );
     }