src/EventSubscriber/ResponseCacheControlSubscriber.php line 18

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  6. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  7. use Symfony\Component\HttpKernel\KernelEvents;
  9. class ResponseCacheControlSubscriber implements EventSubscriberInterface
  10. {
  11.     public static function getSubscribedEvents(): array
  12.     {
  13.         return [
  14.             KernelEvents::RESPONSE => ['onKernelResponse', -10],
  15.         ];
  16.     }
  18.     public function onKernelResponse(ResponseEvent $event): void
  19.     {
  20.         if (!$event->isMainRequest()) {
  21.             return;
  22.         }
  24.         $response = $event->getResponse();
  25.         $statusCode = $response->getStatusCode();
  27.         // Apply no-store cache control for sensitive error responses
  28.         if ($statusCode === 401 || $statusCode === 403 || $statusCode === 404) {
  29.             $response->headers->set('Cache-Control', 'no-store, no-cache, must-revalidate, private');
  30.             $response->headers->set('Pragma', 'no-cache');
  31.             $response->headers->set('Expires', '0');
  32.         }
  33.     }
  34. }