feat: clearDirective() supports report-uri

Author: kenjis

system/HTTP/ContentSecurityPolicy.php

@@ -827,6 +827,12 @@ protected function addToHeader(string $name, $values = null)
      */
     public function clearDirective(string $directive): void
     {
+        if ($directive === 'report-uris') {
+            $this->{$this->directives[$directive]} = null;
+
+            return;
+        }
+
         $this->{$this->directives[$directive]} = [];
     }
 }

tests/system/HTTP/ContentSecurityPolicyTest.php

@@ -650,11 +650,14 @@ public function testClearDirective(): void
         $this->csp->addStyleSrc('css.example.com');
         $this->csp->clearDirective('style-src');
 
+        $this->csp->setReportURI('http://example.com/csp/reports');
+        $this->csp->clearDirective('report-uri');
         $this->csp->finalize($this->response);
 
         $header = $this->response->getHeaderLine('Content-Security-Policy');
 
         $this->assertStringNotContainsString('style-src ', $header);
         $this->assertStringNotContainsString('css.example.com', $header);
+        $this->assertStringNotContainsString('report-uri', $header);
     }
 }