Hsts.php

Go to the documentation of this file.

<?php
namespace Magento\Store\Model\HeaderProvider;

use \Magento\Store\Model\Store;

class Hsts extends \Magento\Framework\App\Response\HeaderProvider\AbstractHeaderProvider
{
    protected $headerName = 'Strict-Transport-Security';

    protected $headerValue = 'max-age=31536000';

    protected $scopeConfig;

    public function __construct(\Magento\Framework\App\Config\ScopeConfigInterface $scopeConfig)
    {
        $this->scopeConfig = $scopeConfig;
    }

    public function canApply()
    {
        return (bool)$this->scopeConfig->isSetFlag(Store::XML_PATH_SECURE_IN_FRONTEND)
            && $this->scopeConfig->isSetFlag(Store::XML_PATH_SECURE_IN_ADMINHTML)
            && $this->scopeConfig->isSetFlag(Store::XML_PATH_ENABLE_HSTS);
    }
}