diff options
Diffstat (limited to 'MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs')
| -rw-r--r-- | MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs b/MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs index 7490d62d6..f9184f6d1 100644 --- a/MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs +++ b/MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs @@ -12,10 +12,12 @@ namespace MediaBrowser.Server.Implementations.HttpServer { private static readonly CultureInfo UsCulture = new CultureInfo("en-US"); private readonly ILogger _logger; + private readonly Func<bool> _denyIframeEmbedding; - public ResponseFilter(ILogger logger) + public ResponseFilter(ILogger logger, Func<bool> denyIframeEmbedding) { _logger = logger; + _denyIframeEmbedding = denyIframeEmbedding; } /// <summary> @@ -28,7 +30,11 @@ namespace MediaBrowser.Server.Implementations.HttpServer { // Try to prevent compatibility view res.AddHeader("X-UA-Compatible", "IE=Edge"); - res.AddHeader("X-Frame-Options", "DENY"); + + if (_denyIframeEmbedding()) + { + res.AddHeader("X-Frame-Options", "DENY"); + } var exception = dto as Exception; |
