/**
* Send HTTP response
*
* Prepares the Response before it is sent to the client. This method tweaks the headers to ensure that
* it is compliant with RFC 2616 and calculates or modifies the cache-control header to a sensible and
* conservative value
*
* @link http://tools.ietf.org/html/rfc2616
*
* @param DispatcherResponseInterface $response
* @return boolean Returns true if the response has been send, otherwise FALSE
*/
public function send(DispatcherResponseInterface $response)
{
$request = $response->getRequest();
//Make sure we do not have body content for 204, 205 and 305 status codes
$codes = array(HttpResponse::NO_CONTENT, HttpResponse::NOT_MODIFIED, HttpResponse::RESET_CONTENT);
if (in_array($response->getStatusCode(), $codes)) {
$response->setContent(null);
}
//Remove location header if we are not redirecting and the status code is not 201
if (!$response->isRedirect() && $response->getStatusCode() !== HttpResponse::CREATED) {
if ($response->headers->has('Location')) {
$response->headers->remove('Location');
}
}
//Add file related information if we are serving a file
if ($response->isDownloadable()) {
//Last-Modified header
$time = $response->getStream()->getTime(FilesystemStream::TIME_MODIFIED);
$response->setLastModified($time);
//Disposition header
$response->headers->set('Content-Disposition', array('inline', 'filename' => '"' . basename($response->getStream()->getPath()) . '"'));
//Force a download by the browser by setting the disposition to 'attachment'.
if ($response->isAttachable()) {
$response->setContentType('application/force-download');
$response->headers->set('Content-Disposition', array('attachment', 'filename' => '"' . basename($response->getStream()->getPath()) . '"'));
}
}
//Add Last-Modified header if not present
if (!$response->headers->has('Last-Modified')) {
$response->setLastModified(new \DateTime('now'));
}
//Add Content-Length if not present
if (!$response->headers->has('Content-Length')) {
$response->headers->set('Content-Length', $response->getStream()->getSize());
}
//Remove Content-Length for transfer encoded responses that do not contain a content range
if ($response->headers->has('Transfer-Encoding')) {
$response->headers->remove('Content-Length');
}
//Modifies the response so that it conforms to the rules defined for a 304 status code.
if ($response->getStatusCode() == HttpResponse::NOT_MODIFIED) {
$response->setContent(null);
$headers = array('Allow', 'Content-Encoding', 'Content-Language', 'Content-Length', 'Content-MD5', 'Content-Type', 'Last-Modified');
//Remove headers that MUST NOT be included with 304 Not Modified responses
foreach ($headers as $header) {
$response->headers->remove($header);
}
}
//Calculates or modifies the cache-control header to a sensible, conservative value.
$cache_control = (array) $response->headers->get('Cache-Control', null, false);
if (empty($cache_control)) {
if (!$response->isCacheable()) {
$response->headers->set('Cache-Control', 'no-cache');
} else {
$response->headers->set('Cache-Control', array('private', 'must-revalidate'));
}
}
//Send headers and content
$this->sendHeaders($response)->sendContent($response);
return headers_sent();
}
/**
* Send HTTP response
*
* Prepares the Response before it is sent to the client. This method tweaks the headers to ensure that
* it is compliant with RFC 2616 and calculates or modifies the cache-control header to a sensible and
* conservative value
*
* @link http://tools.ietf.org/html/rfc2616
* @link http://tools.ietf.org/html/rfc7235
*
* @param DispatcherResponseInterface $response
* @return boolean Returns true if the response has been send, otherwise FALSE
*/
public function send(DispatcherResponseInterface $response)
{
$request = $response->getRequest();
//Make sure we do not have body content for 204, 205 and 305 status codes
$codes = array(HttpResponse::NO_CONTENT, HttpResponse::NOT_MODIFIED, HttpResponse::RESET_CONTENT);
if (in_array($response->getStatusCode(), $codes)) {
$response->setContent(null);
}
//Remove location header if we are not redirecting and the status code is not 201
if (!$response->isRedirect() && $response->getStatusCode() !== HttpResponse::CREATED) {
if ($response->headers->has('Location')) {
$response->headers->remove('Location');
}
}
// IIS does not like it when you have a Location header in a non-redirect request
// @link : http://stackoverflow.com/questions/12074730/w7-pro-iis-7-5-overwrites-php-location-header-solved
if ($response->headers->has('Location') && !$response->isRedirect()) {
$server = isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : getenv('SERVER_SOFTWARE');
if ($server && strpos(strtolower($server), 'microsoft-iis') !== false) {
$response->headers->remove('Location');
}
}
//Add file related information if we are serving a file
if ($response->isDownloadable()) {
//Last-Modified header
if ($time = $response->getStream()->getTime(FilesystemStreamInterface::TIME_MODIFIED)) {
$response->setLastModified($time);
}
//Allow to define a custom filename
if ($response->headers->has('X-Content-Disposition-Filename')) {
$filename = $response->headers->get('X-Content-Disposition-Filename');
$response->headers->remove('X-Content-Disposition-Filename');
} else {
//basename does not work if the string starts with a UTF character
$filename = ltrim(basename(' ' . strtr($response->getStream()->getPath(), array('/' => '/ '))));
}
//Android cuts file names after #
$user_agent = $response->getRequest()->getAgent();
if (stripos($user_agent, 'Android')) {
$filename = str_replace('#', '_', $filename);
}
$disposition = array('filename' => '"' . $filename . '"');
//IE7 and 8 accepts percent encoded file names as the filename value
//Other browsers (except Safari) use filename* header starting with UTF-8''
$encoded_name = rawurlencode($filename);
if ($encoded_name !== $filename) {
if (preg_match('/(?i)MSIE [4-8]/i', $user_agent)) {
$disposition['filename'] = '"' . $encoded_name . '"';
} elseif (!stripos($user_agent, 'AppleWebkit')) {
$disposition['filename*'] = 'UTF-8\'\'' . $encoded_name;
}
}
//Disposition header
$response->headers->set('Content-Disposition', array_merge(array('inline'), $disposition));
//Force a download by the browser by setting the disposition to 'attachment'.
if ($response->isAttachable()) {
$response->setContentType('application/octet-stream');
$response->headers->set('Content-Disposition', array_merge(array('attachment'), $disposition));
}
}
//Add Last-Modified header if not present
if (!$response->headers->has('Last-Modified')) {
$response->setLastModified(new \DateTime('now'));
}
//Add Content-Length if not present
if (!$response->headers->has('Content-Length') && $response->getStream()->getSize()) {
$response->headers->set('Content-Length', $response->getStream()->getSize());
}
//Remove Content-Length for transfer encoded responses that do not contain a content range
if ($response->headers->has('Transfer-Encoding')) {
$response->headers->remove('Content-Length');
}
//Modifies the response so that it conforms to the rules defined for a 304 status code.
if ($response->getStatusCode() == HttpResponse::NOT_MODIFIED) {
$response->setContent(null);
$headers = array('Allow', 'Content-Encoding', 'Content-Language', 'Content-Length', 'Content-MD5', 'Content-Type', 'Last-Modified');
//Remove headers that MUST NOT be included with 304 Not Modified responses
foreach ($headers as $header) {
$response->headers->remove($header);
}
}
//Modifies the response so that it conforms to the rules defined for a 401 status code.
if ($response->getStatusCode() == HttpResponse::UNAUTHORIZED) {
//The response MUST include a WWW-Authenticate header field, use 'unknown' scheme.
//@link : http://tools.ietf.org/html/rfc7235 (updated spec)
//@link : http://greenbytes.de/tech/tc/httpauth/
if (!$response->headers->has('WWW-Authenticate')) {
$response->headers->set('WWW-Authenticate', 'unknown');
}
}
//Calculates or modifies the cache-control header to a sensible, conservative value.
$cache_control = (array) $response->headers->get('Cache-Control', null, false);
if (empty($cache_control)) {
if (!$response->isCacheable()) {
$response->headers->set('Cache-Control', 'no-cache');
} else {
$response->headers->set('Cache-Control', array('private', 'must-revalidate'));
}
}
// Prevent caching: Cache-control needs to be empty for IE on SSL.
// @link : http://support.microsoft.com/default.aspx?scid=KB;EN-US;q316431
if ($request->isSecure() && preg_match('#(?:MSIE |Internet Explorer/)(?:[0-9.]+)#', $request->getAgent())) {
$response->headers->set('Cache-Control', '');
}
//Send headers and content
$this->sendHeaders($response)->sendContent($response);
return parent::send($response);
}