/** * @param ParsedUrlInterface $requestOrigin * @param ParsedUrlInterface $serverOrigin * * @return bool * * @see http://tools.ietf.org/html/rfc6454#section-5 */ protected function isSameOrigin(ParsedUrlInterface $requestOrigin, ParsedUrlInterface $serverOrigin) { $isSameOrigin = $requestOrigin->isHostEqual($serverOrigin) === true && $requestOrigin->isPortEqual($serverOrigin) === true && $requestOrigin->isSchemeEqual($serverOrigin) === true; return $isSameOrigin; }