From 37d0c99242fbf58f935fa2b1443a088c27848391 Mon Sep 17 00:00:00 2001
From: Boris van Katwijk <borisvankatwijk@gmail.com>
Date: Fri, 11 Jun 2021 12:39:29 +0200
Subject: [PATCH 1/3] [FEATURE][ARCI-143] Made notice/error bar less red.

---
 Model/Message/ReportErrors.php | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/Model/Message/ReportErrors.php b/Model/Message/ReportErrors.php
index 1ecffc3..a5d31e5 100644
--- a/Model/Message/ReportErrors.php
+++ b/Model/Message/ReportErrors.php
@@ -83,11 +83,6 @@ public function getText()
         $url = $this->urlBuilder->getUrl('experius_csp/report/index');
         return __(
             '<style>
-                .message-system-short,
-                .message-system-short * {
-                    background-color: #e22626;
-                    color: #fff !important;
-                 }
                  .message-system-collapsible a.csp-error {
                     color: #e22626;
                  }

From 69c54879250a6856d9c3a8eace3415572da8bf9f Mon Sep 17 00:00:00 2001
From: Boris van Katwijk <borisvankatwijk@gmail.com>
Date: Fri, 11 Jun 2021 12:40:34 +0200
Subject: [PATCH 2/3] [BUGFIX][DLTM2-617][ARCI-143] Configuration did not have
 a "tab". ACL is missing for configuration.

---
 etc/acl.xml              | 27 +++++++++++++++++----------
 etc/adminhtml/system.xml |  9 ++++++---
 2 files changed, 23 insertions(+), 13 deletions(-)

diff --git a/etc/acl.xml b/etc/acl.xml
index fa9535c..6f5647c 100644
--- a/etc/acl.xml
+++ b/etc/acl.xml
@@ -1,13 +1,20 @@
 <?xml version="1.0" ?>
 <config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:framework:Acl/etc/acl.xsd">
-	<acl>
-		<resources>
-			<resource id="Magento_Backend::admin">
-				<resource id="Experius_Csp::report" sortOrder="10" title="Report">
-					<resource id="Experius_Csp::report_delete" sortOrder="20" title="Delete Report"/>
-					<resource id="Experius_Csp::report_view" sortOrder="40" title="View Report"/>
-				</resource>
-			</resource>
-		</resources>
-	</acl>
+    <acl>
+        <resources>
+            <resource id="Magento_Backend::admin">
+                <resource id="Experius_Csp::report" sortOrder="10" title="Report">
+                    <resource id="Experius_Csp::report_delete" sortOrder="20" title="Delete Report"/>
+                    <resource id="Experius_Csp::report_view" sortOrder="40" title="View Report"/>
+                </resource>
+            </resource>
+            <resource id="Magento_Backend::stores">
+                <resource id="Magento_Backend::stores_settings">
+                    <resource id="Magento_Config::config">
+                        <resource id="Experius_Csp::config_experius_csp" title="Experius Csp Reporting"/>
+                    </resource>
+                </resource>
+            </resource>
+        </resources>
+    </acl>
 </config>
diff --git a/etc/adminhtml/system.xml b/etc/adminhtml/system.xml
index e6845fd..0f5cec8 100644
--- a/etc/adminhtml/system.xml
+++ b/etc/adminhtml/system.xml
@@ -1,15 +1,18 @@
 <?xml version="1.0" ?>
 <config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Config:etc/system_file.xsd">
     <system>
+        <tab id="experius" translate="label" sortOrder="999">
+            <label>Experius</label>
+        </tab>
         <section id="experius_csp" sortOrder="10" showInWebsite="1" showInStore="1" showInDefault="1" translate="label">
             <label>Experius CSP</label>
             <tab>experius</tab>
             <resource>Experius_Csp::config_experius_csp</resource>
             <group id="general" sortOrder="10" showInWebsite="1" showInStore="1" showInDefault="1" translate="label">
-                <label>general</label>
-                <field id="add_all_storefront_urls" type="text" sortOrder="10" showInWebsite="1" showInStore="1" showInDefault="1" translate="label">
+                <label>General</label>
+                <field id="add_all_storefront_urls" type="text" sortOrder="10" showInWebsite="1" showInStore="1" showInDefault="1" translate="label comment">
                     <label>add_all_storefront_urls</label>
-                    <comment/>
+                    <comment>This adds all base urls of the available storefronts for this Magento installation to the csp_whitelist.</comment>
                 </field>
             </group>
         </section>

From c0ae13c1e644442ba2e431b0f5466343d3f191b7 Mon Sep 17 00:00:00 2001
From: Boris van Katwijk <borisvankatwijk@gmail.com>
Date: Fri, 11 Jun 2021 12:41:56 +0200
Subject: [PATCH 3/3] [FEATURE][ARCI-143] Add "on/off" switch (configuration
 setting) to toggle reporting on and off by NOT returning the reporting url
 csp_reporting.php when the reporting setting is disabled. Default is enabled.

---
 .../Csp/Api/Data/ModeConfiguredInterface.php  | 46 +++++++++++++++++++
 etc/adminhtml/system.xml                      |  5 ++
 etc/config.xml                                |  1 +
 etc/di.xml                                    | 23 ++++++----
 4 files changed, 67 insertions(+), 8 deletions(-)
 create mode 100644 Plugin/Magento/Csp/Api/Data/ModeConfiguredInterface.php

diff --git a/Plugin/Magento/Csp/Api/Data/ModeConfiguredInterface.php b/Plugin/Magento/Csp/Api/Data/ModeConfiguredInterface.php
new file mode 100644
index 0000000..01dd90d
--- /dev/null
+++ b/Plugin/Magento/Csp/Api/Data/ModeConfiguredInterface.php
@@ -0,0 +1,46 @@
+<?php
+/**
+ * Copyright © Experius B.V. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Experius\Csp\Plugin\Magento\Csp\Api\Data;
+
+use Magento\Framework\App\Config\ScopeConfigInterface;
+
+class ModeConfiguredInterface
+{
+    const XML_PATH_CSP_REPORTING_ENABLED = 'experius_csp/general/reporting_enabled';
+
+    /**
+     * @var ScopeConfigInterface
+     */
+    protected $scopeConfig;
+
+    public function __construct(
+        ScopeConfigInterface $scopeConfig
+    ) {
+        $this->scopeConfig = $scopeConfig;
+    }
+
+    /**
+     * After getReportUri() plugin to be able to disable Content Security Policy reporting using configuration
+     *
+     * @param \Magento\Csp\Api\Data\ModeConfiguredInterface $subject
+     * @param $result
+     * @return string
+     * @SuppressWarnings(PHPMD.UnusedFormalParameter)
+     */
+    public function afterGetReportUri(
+        \Magento\Csp\Api\Data\ModeConfiguredInterface $subject,
+        $result
+    ): ?string {
+        if (!$this->scopeConfig->isSetFlag(self::XML_PATH_CSP_REPORTING_ENABLED)) {
+            // Return empty reporting url to disable reporting
+            return null;
+        }
+
+        return $result;
+    }
+}
diff --git a/etc/adminhtml/system.xml b/etc/adminhtml/system.xml
index 0f5cec8..5a2056e 100644
--- a/etc/adminhtml/system.xml
+++ b/etc/adminhtml/system.xml
@@ -14,6 +14,11 @@
                     <label>add_all_storefront_urls</label>
                     <comment>This adds all base urls of the available storefronts for this Magento installation to the csp_whitelist.</comment>
                 </field>
+                <field id="reporting_enabled" type="select" sortOrder="20" showInDefault="1" showInWebsite="0" showInStore="0" translate="label comment">
+                    <label>Reporting enabled</label>
+                    <comment>Disable to stop reporting to database temporarily.</comment>
+                    <source_model>Magento\Config\Model\Config\Source\Yesno</source_model>
+                </field>
             </group>
         </section>
     </system>
diff --git a/etc/config.xml b/etc/config.xml
index 4a0c9bd..feb4eb8 100644
--- a/etc/config.xml
+++ b/etc/config.xml
@@ -15,6 +15,7 @@
         <experius_csp>
             <general>
                 <add_all_storefront_urls>1</add_all_storefront_urls>
+                <reporting_enabled>1</reporting_enabled>
             </general>
         </experius_csp>
     </default>
diff --git a/etc/di.xml b/etc/di.xml
index dd82afb..16651da 100644
--- a/etc/di.xml
+++ b/etc/di.xml
@@ -18,13 +18,20 @@
 		</arguments>
 	</type>
 	<type name="Magento\Framework\App\Response\HttpInterface">
-		<plugin disabled="false" name="Experius_Csp_Plugin_Magento_Framework_App_Response_HttpInterface" sortOrder="10" type="Experius\Csp\Plugin\Magento\Framework\App\Response\HttpInterface"/>
+		<plugin name="Experius_Csp_Plugin_Magento_Framework_App_Response_HttpInterface"
+				type="Experius\Csp\Plugin\Magento\Framework\App\Response\HttpInterface"
+				sortOrder="10"/>
+	</type>
+	<type name="Magento\Csp\Api\Data\ModeConfiguredInterface">
+		<plugin name="Experius_Csp_Plugin_Magento_Csp_Api_Data_ModeConfiguredInterface"
+				type="Experius\Csp\Plugin\Magento\Csp\Api\Data\ModeConfiguredInterface"
+				sortOrder="9999"/>
+	</type>
+	<type name="Magento\Csp\Model\CompositePolicyCollector">
+		<arguments>
+			<argument name="collectors" xsi:type="array">
+				<item name="200" xsi:type="object">Experius\Csp\Model\Collector\DynamicCollector</item>
+			</argument>
+		</arguments>
 	</type>
-    <type name="Magento\Csp\Model\CompositePolicyCollector">
-        <arguments>
-            <argument name="collectors" xsi:type="array">
-                <item name="200" xsi:type="object">Experius\Csp\Model\Collector\DynamicCollector</item>
-            </argument>
-        </arguments>
-    </type>
 </config>