Skip to content
Snippets Groups Projects
Commit 1fc24578 authored by Julian Pustkuchen's avatar Julian Pustkuchen
Browse files

Issue #3286042 by Project Update Bot, stevenlafl, mrinalini9: Automated Drupal...

parent c4bbe85c
No related branches found
No related tags found
1 merge request!1Issue #3286042 by Project Update Bot, stevenlafl, mrinalini9: Automated Drupal...
name: Allow site to be iframed
description: Watch out for clickjacking...
description: Allows certain paths to be embedded in iframes. Watch out for clickjacking!
type: module
package: Security
configure: allow_iframed_site.settings
core: 8.x
core_version_requirement: ^8 || ^9
core_version_requirement: ^8.9 || ^9.5 || ^10
......@@ -2,9 +2,9 @@
namespace Drupal\allow_iframed_site\EventSubscriber;
use Symfony\Component\HttpKernel\Event\ResponseEvent;
use Drupal\Component\Plugin\Exception\PluginException;
use Symfony\Component\EventDispatcher\EventSubscriberInterface;
use Symfony\Component\HttpKernel\Event\FilterResponseEvent;
use Symfony\Component\HttpKernel\KernelEvents;
use Drupal\Core\Config\ConfigFactoryInterface;
use Drupal\Core\Executable\ExecutableManagerInterface;
......@@ -44,11 +44,11 @@ class RemoveXFrameOptionsSubscriber implements EventSubscriberInterface {
/**
* Remove the X-Frame-Options header.
*
* @param \Symfony\Component\HttpKernel\Event\FilterResponseEvent $event
* @param \Symfony\Component\HttpKernel\Event\ResponseEvent $event
*
* @throws \Drupal\Component\Plugin\Exception\PluginException
*/
public function RemoveXFrameOptions(FilterResponseEvent $event) {
public function RemoveXFrameOptions(ResponseEvent $event) {
$xframe = TRUE;
/**
* Don't remove X-Frame-Options if pages and negate fields are not configured.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment