/**
* Constructor
*
* @param App $config
*
* @todo Recommend removing reliance on config injection
*/
public function __construct($config) { // Default to a non-caching page.
// Also ensures that a Cache-control header exists.
$this->
noCache();
// We need CSP object even if not enabled to avoid calls to non existing methods
$this->CSP = Services::
csp();
$this->CSPEnabled =
$config->CSPEnabled;
$this->cookieStore =
new CookieStore([]);
$cookie =
config(CookieConfig::
class);
Cookie::
setDefaults($cookie);