/// <summary>
/// Adds the "X-Frame-Options" with DENY when the request uri is not provided to the response. Otherwise the request
/// uri with ALLOW-FROM <request uri>.
/// </summary>
/// <param name="builder">The OWIN builder instance.</param>
/// <param name="origins">The allowed uirs.</param>
/// <returns>The OWIN builder instance.</returns>
public static BuildFunc AntiClickjackingHeader(this BuildFunc builder, params Uri[] origins)
{
origins.MustNotNull("origins");
origins.MustHaveAtLeastOneValue("origins");
builder(_ => AntiClickjackingMiddleware.AntiClickjackingHeader(origins));
return(builder);
}
/// <summary>
/// Adds the "X-Frame-Options" header with the given option to the response.
/// </summary>
/// <param name="builder">The OWIN builder instance.</param>
/// <param name="option">The X-Frame option.</param>
/// <returns>The OWIN builder instance.</returns>
public static BuildFunc AntiClickjackingHeader(this BuildFunc builder, XFrameOption option)
{
builder(_ => AntiClickjackingMiddleware.AntiClickjackingHeader(option));
return(builder);
}
