Online PHP editor | output for YPirH

<?php $hashAlgo = 'sha384'; //$hashAlgo = 'sha256'; $maxHeaderLength = 2048; // $maxHeaderLength = 3072; // Do not change after here $baseCsp = "default-src 'self'; report-uri https://www.my-super-domain.com/_contao/csp/report/51; style-src 'self' 'unsafe-hashes' 'nonce-H0Sss0Ol1d/r/rgWp4sRk3IT'; script-src 'self' 'unsafe-hashes' 'nonce-H0Sss0Ol1d/r/rgWp4sRk3IT'"; // + 3 for wrapping '' and space $lengthOfOneHash = strlen($hashAlgo . '-' . base64_encode(hash($hashAlgo, 'text-decoration: underline'))) + 3; $count = 0; $total = strlen($baseCsp); while (true) { $total += $lengthOfOneHash; if ($total > $maxHeaderLength) { echo 'Could fit ' . $count . ' hashes in the CSP header.'; break; } $count++; }