| Current Path : /home/rtorresani/www/vendor/magento/framework/App/Response/HeaderProvider/ |
| Current File : //home/rtorresani/www/vendor/magento/framework/App/Response/HeaderProvider/XFrameOptions.php |
<?php
/**
* Copyright © Magento, Inc. All rights reserved.
* See COPYING.txt for license details.
*/
namespace Magento\Framework\App\Response\HeaderProvider;
use \Magento\Framework\App\Response\Http;
/**
* Adds an X-FRAME-OPTIONS header to HTTP responses to safeguard against click-jacking.
*/
class XFrameOptions extends \Magento\Framework\App\Response\HeaderProvider\AbstractHeaderProvider
{
/** Deployment config key for frontend x-frame-options header value */
const DEPLOYMENT_CONFIG_X_FRAME_OPT = 'x-frame-options';
/** Always send SAMEORIGIN in backend x-frame-options header */
const BACKEND_X_FRAME_OPT = 'SAMEORIGIN';
/**
* x-frame-options Header name
*
* @var string
*/
protected $headerName = Http::HEADER_X_FRAME_OPT;
/**
* x-frame-options header value
*
* @var string
*/
protected $headerValue;
/**
* @param string $xFrameOpt
*/
public function __construct($xFrameOpt = 'SAMEORIGIN')
{
$this->headerValue = $xFrameOpt;
}
}