sameOrigin = $sameOrigin; } function headers() { if ($this->sameOrigin) { header("X-Frame-Options: SameOrigin"); } header("X-XSS-Protection: 0"); return false; } }