custom/plugins/SwagPlatformSecurity/src/Fixes/NEXT20309/SecurityFix.php line 43

Open in your IDE?
  1. <?php
  3. namespace Swag\Security\Fixes\NEXT20309;
  5. use Shopware\Core\Framework\Event\BeforeSendResponseEvent;
  6. use Swag\Security\Components\AbstractSecurityFix;
  7. use Symfony\Component\DependencyInjection\ContainerInterface;
  9. class SecurityFix extends AbstractSecurityFix
  10. {
  11.     /**
  12.      * @var ContainerInterface
  13.      */
  14.     protected $container;
  16.     public function __construct(ContainerInterface $container)
  17.     {
  18.         $this->container = $container;
  19.     }
  21.     public static function getTicket(): string
  22.     {
  23.         return 'NEXT-20309';
  24.     }
  26.     public static function getMinVersion(): string
  27.     {
  28.         return '6.1.0';
  29.     }
  31.     public static function getMaxVersion(): string
  32.     {
  33.         return '6.4.8.2';
  34.     }
  36.     public static function getSubscribedEvents(): array
  37.     {
  38.         return [
  39.             BeforeSendResponseEvent::class => 'beforeSendResponse'
  40.         ];
  41.     }
  43.     public function beforeSendResponse(BeforeSendResponseEvent $event): void
  44.     {
  45.         $reverseProxyEnabled = $this->container->hasParameter('storefront.reverse_proxy.enabled') && $this->container->getParameter('storefront.reverse_proxy.enabled');
  47.         if ($reverseProxyEnabled) {
  48.             return;
  49.         }
  51.         $response = $event->getResponse();
  53.         $noStore = $response->headers->getCacheControlDirective('no-store');
  55.         // We don't want that the client will cache the website, if no reverse proxy is configured
  56.         $response->headers->remove('cache-control');
  57.         $response->setPrivate();
  59.         if ($noStore) {
  60.             $response->headers->addCacheControlDirective('no-store');
  61.         } else {
  62.             $response->headers->addCacheControlDirective('no-cache');
  63.         }
  64.     }
  65. }