Methods
Constants
CONTENT_TYPE | = | "Content-Type" |
POLICY | = | "Content-Security-Policy" |
POLICY_REPORT_ONLY | = | "Content-Security-Policy-Report-Only" |
Class Public methods
new(app)
📝 Source code
# File actionpack/lib/action_dispatch/http/content_security_policy.rb, line 13
def initialize(app)
@app = app
end
🔎 See on GitHub
Instance Public methods
call(env)
📝 Source code
# File actionpack/lib/action_dispatch/http/content_security_policy.rb, line 17
def call(env)
request = ActionDispatch::Request.new env
_, headers, _ = response = @app.call(env)
return response if policy_present?(headers)
if policy = request.content_security_policy
nonce = request.content_security_policy_nonce
nonce_directives = request.content_security_policy_nonce_directives
context = request.controller_instance || request
headers[header_name(request)] = policy.build(context, nonce, nonce_directives)
end
response
end
🔎 See on GitHub