public function RemoveXFrameOptionsSubscriber::RemoveXFrameOptions in Allow site iframing 8

Same name and namespace in other branches

1. 3.0.x src/EventSubscriber/RemoveXFrameOptionsSubscriber.php \Drupal\allow_iframed_site\EventSubscriber\RemoveXFrameOptionsSubscriber::RemoveXFrameOptions()

Remove the X-Frame-Options header.

Parameters

\Symfony\Component\HttpKernel\Event\FilterResponseEvent $event:

Throws

\Drupal\Component\Plugin\Exception\PluginException

File

src/EventSubscriber/RemoveXFrameOptionsSubscriber.php, line 51

Class

RemoveXFrameOptionsSubscriber

An event subscriber to remove the X-Frame-Options header.

Namespace

Drupal\allow_iframed_site\EventSubscriber

Code

public function RemoveXFrameOptions(FilterResponseEvent $event) {
  $xframe = TRUE;
  foreach ($this->config
    ->getRawData() as $key => $config) {
    try {

      /* @var \Drupal\system\Plugin\Condition\RequestPath $condition */
      $condition = $this->conditionManager
        ->createInstance($key);
      $condition
        ->setConfiguration($this->config
        ->get($key));
      if ($condition
        ->evaluate() && $condition
        ->isNegated() || !$condition
        ->evaluate() && !$condition
        ->isNegated()) {
        $xframe = FALSE;
      }
    } catch (PluginException $exception) {

      // Just ignore it, there's probably not much else to do.
    }
  }

  // If we got here we should be fine, but check it anyway.
  if ($xframe) {
    $response = $event
      ->getResponse();
    $response->headers
      ->remove('X-Frame-Options');
  }
}