SendmailCommandValidationTransportFactory.php

<?php

declare (strict_types=1);
namespace Drupal\Core\Mailer\Transport;

use Drupal\Core\Site\Settings;
use Symfony\Component\DependencyInjection\Attribute\AutowireDecorated;
use Symfony\Component\Mailer\Transport\Dsn;
use Symfony\Component\Mailer\Transport\TransportFactoryInterface;
use Symfony\Component\Mailer\Transport\TransportInterface;

/**
 * Command validation decorator for sendmail transport factory.
 */
class SendmailCommandValidationTransportFactory implements TransportFactoryInterface {
    
    /**
     * Construct command validation decorator for sendmail transport factory.
     *
     * @param \Symfony\Component\Mailer\Transport\TransportFactoryInterface $inner
     *   The decorated sendmail transport factory.
     */
    public function __construct(TransportFactoryInterface $inner) {
    }
    
    /**
     * {@inheritdoc}
     */
    public function create(Dsn $dsn) : TransportInterface {
        $command = $dsn->getOption('command');
        if (!empty($command)) {
            $commands = Settings::get('mailer_sendmail_commands', []);
            if (!in_array($command, $commands, TRUE)) {
                throw new \RuntimeException("Unsafe sendmail command {$command}");
            }
        }
        return $this->inner
            ->create($dsn);
    }
    
    /**
     * {@inheritdoc}
     */
    public function supports(Dsn $dsn) : bool {
        return $this->inner
            ->supports($dsn);
    }

}