class RemoveXFrameOptionsSubscriber in LTI Tool Provider 2.x

Hierarchy

• class \Drupal\lti_tool_provider\EventSubscriber\RemoveXFrameOptionsSubscriber implements \Symfony\Component\EventDispatcher\EventSubscriberInterface

1 string reference to 'RemoveXFrameOptionsSubscriber'

lti_tool_provider.services.yml in ./lti_tool_provider.services.yml

lti_tool_provider.services.yml

1 service uses RemoveXFrameOptionsSubscriber

lti_tool_provider.xframe.event_subscriber in ./lti_tool_provider.services.yml

Drupal\lti_tool_provider\EventSubscriber\RemoveXFrameOptionsSubscriber

File

src/EventSubscriber/RemoveXFrameOptionsSubscriber.php, line 10

Namespace

Drupal\lti_tool_provider\EventSubscriber

class RemoveXFrameOptionsSubscriber implements EventSubscriberInterface {

  /**
   * @return array|mixed
   */
  public static function getSubscribedEvents() : array {
    $events[KernelEvents::RESPONSE][] = [
      'RemoveXFrameOptions',
      -10,
    ];
    return $events;
  }

  /**
   * @param ResponseEvent $event
   *
   * @todo Only add ResponseEvent typing to $event once D8 is no longer
   *   supported.
   */
  public function RemoveXFrameOptions($event) {
    if (Drupal::config('lti_tool_provider.settings')
      ->get('iframe')) {
      $session = $event
        ->getRequest()
        ->getSession();
      $context = $session
        ->get('lti_tool_provider_context');
      if (!empty($context) && Drupal::currentUser()
        ->isAuthenticated()) {
        $response = $event
          ->getResponse();
        $response->headers
          ->remove('X-Frame-Options');
      }
    }
  }

}

Members

Name	Modifiers	Type	Description	Overrides
RemoveXFrameOptionsSubscriber::getSubscribedEvents	public static	function
RemoveXFrameOptionsSubscriber::RemoveXFrameOptions	public	function	@todo Only add ResponseEvent typing to $event once D8 is no longer supported.