RemoveXFrameOptionsSubscriber.php in LTI Tool Provider 2.x

Namespace

Drupal\lti_tool_provider\EventSubscriber

File

src/EventSubscriber/RemoveXFrameOptionsSubscriber.php

<?php

namespace Drupal\lti_tool_provider\EventSubscriber;

use Drupal;
use Symfony\Component\EventDispatcher\EventSubscriberInterface;
use Symfony\Component\HttpKernel\Event\ResponseEvent;
use Symfony\Component\HttpKernel\KernelEvents;
class RemoveXFrameOptionsSubscriber implements EventSubscriberInterface {

  /**
   * @return array|mixed
   */
  public static function getSubscribedEvents() : array {
    $events[KernelEvents::RESPONSE][] = [
      'RemoveXFrameOptions',
      -10,
    ];
    return $events;
  }

  /**
   * @param ResponseEvent $event
   *
   * @todo Only add ResponseEvent typing to $event once D8 is no longer
   *   supported.
   */
  public function RemoveXFrameOptions($event) {
    if (Drupal::config('lti_tool_provider.settings')
      ->get('iframe')) {
      $session = $event
        ->getRequest()
        ->getSession();
      $context = $session
        ->get('lti_tool_provider_context');
      if (!empty($context) && Drupal::currentUser()
        ->isAuthenticated()) {
        $response = $event
          ->getResponse();
        $response->headers
          ->remove('X-Frame-Options');
      }
    }
  }

}

Classes

Name	Description
RemoveXFrameOptionsSubscriber