Instead of sending headers on his own, the module append them to the headers response collection on "afterPrepare"

Author: bicf

src/components/Response.php

@@ -5,13 +5,13 @@
 
 /**
  * Class Response
+ *
  * ```php
  * [
  *     'components' => [
  *         'response' => [
  *             'class' => 'bicf\securityheaders\Response',
- *             'on afterPrepare' => ['bicf\securityheaders\Response','modulesInit'],
- *             'on afterSend' => ['bicf\securityheaders\Response','modulesSendHeaders'],
+ *             'on afterPrepare' => ['bicf\securityheaders\Response','addSecurityHeaders'],
  *             'modules' => [
  *                'XContentTypeOptions'=>[
  *                    'class' => 'bicf\securityheaders\modules\HeaderXContentTypeOptions',
@@ -93,11 +93,11 @@ public function init()
     /**
      *
      */
-    public static function modulesSendHeaders($event)
+    public static function addSecurityHeaders($event)
     {
         /** @var $event->sender \bicf\securityheaders\components\Response */
         foreach ($event->sender->modules as $module){
-            $module->send();
+            $module->run();
         }
     }
 }

src/modules/HeaderAccessControlAllowMethods.php

@@ -18,11 +18,12 @@ public function init()
         }
     }
 
-    public function send()
+    public function run()
     {
         if(!$this->enabled){
             return;
         }
-        \Yii::$app->response->headers->set('Access-Control-Allow-Methods',$this->value);
+//        new Header
+        \Yii::$app->response->headers->add('Access-Control-Allow-Methods',$this->value);
     }
 }

src/modules/HeaderAccessControlAllowOrigin.php

@@ -10,14 +10,14 @@ class HeaderAccessControlAllowOrigin extends HeaderModuleBase
 {
     public $value;
 
-    public function send()
+    public function run()
     {
         if(!$this->enabled){
             return;
         }
         if($this->value === null){
             return;
         }
-        \Yii::$app->response->headers->set('Access-Control-Allow-Origin',$this->value);
+        \Yii::$app->response->headers->add('Access-Control-Allow-Origin',$this->value);
     }
 }

src/modules/HeaderContentSecurityPolicyBase.php

@@ -36,7 +36,7 @@ abstract class HeaderContentSecurityPolicyBase extends HeaderModuleBase
     /**
      * add the security header
      */
-    public function send(){
+    public function run(){
         if(!$this->enabled){
             return;
         }
@@ -50,7 +50,7 @@ public function send(){
             $value .="$sep$k $v";
             $sep ="; ";
         }
-        \Yii::$app->response->headers->set($this->headerName,$value);
+        \Yii::$app->response->headers->add($this->headerName,$value);
     }
 
     public function injectBehavior(Response $response)

src/modules/HeaderModuleInterface.php

@@ -15,5 +15,5 @@ interface HeaderModuleInterface
 {
     public function init();
     public function injectBehavior(Response $response);
-    public function send();
+    public function run();
 }

src/modules/HeaderXContentTypeOptions.php

@@ -20,11 +20,11 @@ public function init()
     }
 
 
-    public function send()
+    public function run()
     {
         if(!$this->enabled){
             return;
         }
-        \Yii::$app->response->headers->set('X-Content-Type-Options',$this->value);
+        \Yii::$app->response->headers->add('X-Content-Type-Options',$this->value);
     }
 }

tests/tp.php

@@ -0,0 +1,14 @@
+<?php
+
+for($three=1;$three<2000;$three++){
+for($two=1;$two<2000;$two++){
+    $gtwo = gmp_pow("2",$two);
+    $gthree = gmp_pow("3",$three);
+    $gnup = gmp_add(gmp_mul($gtwo,$gthree),1 );
+    $gndown = gmp_sub(gmp_mul($gtwo,$gthree),"1" );
+    if(gmp_prob_prime($gnup) && gmp_prob_prime($gndown)){
+        printf("%s ## %s \n",gmp_strval($gndown),gmp_strval($gnup));
+
+    }
+ }
+}