class ResponseListener
{
    private $_enabled;
    private $_serviceContainer;
    private $_authChecker;

    public function __construct(Container $serviceContainer, $enabled, AuthorizationCheckerInterface $authChecker)
    {
        $this->_enabled = $enabled;
        $this->_serviceContainer = $serviceContainer;
        $this->_authChecker = $authChecker;
    }

    public function onKernelResponse(FilterResponseEvent $event)
    {
        $response = $event->getResponse();

        if ($event->isMasterRequest()) {
            // Set headers
            $responseHeaders = $response->headers;
            $responseHeaders->set('strict-transport-security', 'max-age=31536000; includeSubDomains');
            $responseHeaders->set('X-XSS-Protection', '1; mode=block');
            $responseHeaders->set('X-Content-Type-Options', 'nosniff');

            $linkProvider = $event->getRequest()->attributes->get('_links');
            if (!$linkProvider instanceof \Psr\Link\LinkProviderInterface || !$links = $linkProvider->getLinks()) {
                return;
            }
            $serializer = new \Symfony\Component\WebLink\HttpHeaderSerializer();
            $responseHeaders->set('Link', $serializer->serialize($links), false);

        }
    }
}