aboutsummaryrefslogtreecommitdiff
path: root/MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs
diff options
context:
space:
mode:
Diffstat (limited to 'MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs')
-rw-r--r--MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs10
1 files changed, 8 insertions, 2 deletions
diff --git a/MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs b/MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs
index 7490d62d6..f9184f6d1 100644
--- a/MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs
+++ b/MediaBrowser.Server.Implementations/HttpServer/ResponseFilter.cs
@@ -12,10 +12,12 @@ namespace MediaBrowser.Server.Implementations.HttpServer
{
private static readonly CultureInfo UsCulture = new CultureInfo("en-US");
private readonly ILogger _logger;
+ private readonly Func<bool> _denyIframeEmbedding;
- public ResponseFilter(ILogger logger)
+ public ResponseFilter(ILogger logger, Func<bool> denyIframeEmbedding)
{
_logger = logger;
+ _denyIframeEmbedding = denyIframeEmbedding;
}
/// <summary>
@@ -28,7 +30,11 @@ namespace MediaBrowser.Server.Implementations.HttpServer
{
// Try to prevent compatibility view
res.AddHeader("X-UA-Compatible", "IE=Edge");
- res.AddHeader("X-Frame-Options", "DENY");
+
+ if (_denyIframeEmbedding())
+ {
+ res.AddHeader("X-Frame-Options", "DENY");
+ }
var exception = dto as Exception;