Show More
Commit Description:
rails 6
Commit Description:
rails 6
References:
File last commit:
Show/Diff file:
Action:
config/initializers/content_security_policy.rb
| 30 lines
| 1.4 KiB
| text/x-ruby
| RubyLexer
|
| r750 | # Be sure to restart your server when you modify this file. | |||
| # Define an application-wide content security policy | ||||
| # For further information see the following documentation | ||||
| # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy | ||||
| # Rails.application.config.content_security_policy do |policy| | ||||
| # policy.default_src :self, :https | ||||
| # policy.font_src :self, :https, :data | ||||
| # policy.img_src :self, :https, :data | ||||
| # policy.object_src :none | ||||
| # policy.script_src :self, :https | ||||
| # policy.style_src :self, :https | ||||
| r819 | # # If you are using webpack-dev-server then specify webpack-dev-server host | |||
| # policy.connect_src :self, :https, "http://localhost:3035", "ws://localhost:3035" if Rails.env.development? | ||||
| r750 | ||||
| # # Specify URI for violation reports | ||||
| # # policy.report_uri "/csp-violation-report-endpoint" | ||||
| # end | ||||
| # If you are using UJS then enable automatic nonce generation | ||||
| # Rails.application.config.content_security_policy_nonce_generator = -> request { SecureRandom.base64(16) } | ||||
| r819 | # Set the nonce only to specific directives | |||
| # Rails.application.config.content_security_policy_nonce_directives = %w(script-src) | ||||
| r750 | # Report CSP violations to a specified URI | |||
| # For further information see the following documentation: | ||||
| # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy-Report-Only | ||||
| # Rails.application.config.content_security_policy_report_only = true | ||||