src/EventSubscriber/ResponseSubscriber.php line 20

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  8. use Symfony\Component\HttpKernel\KernelEvents;
  11. class ResponseSubscriber implements EventSubscriberInterface
  12. {
  13.     public static function getSubscribedEvents()
  14.     {
  15.         return [
  16.             KernelEvents::RESPONSE => 'onResponse'
  17.         ];
  18.     }
  20.     public function onResponse(ResponseEvent $event)
  21.     {
  22.         $response = $event->getResponse();
  24.         $policy = "frame-ancestors 'none'";
  26.         $response->headers->set("Content-Security-Policy", $policy);
  27.         $response->headers->set("X-Content-Security-Policy", $policy);
  28.         $response->headers->set("X-WebKit-CSP", $policy);
  29.     }
  30. }