summary refs log tree commit diff stats
path: root/rails/test/dummy/config/initializers/content_security_policy.rb
diff options
context:
space:
mode:
authorStar Rauchenberger <fefferburbia@gmail.com>2023-12-07 21:14:52 +0000
committerStar Rauchenberger <fefferburbia@gmail.com>2023-12-07 21:14:52 +0000
commit295dd1906a98913275145c5b9cc403f1e76cfd33 (patch)
treef45d7721c9a138b743ada905a12596f050a7473d /rails/test/dummy/config/initializers/content_security_policy.rb
parent460edd4191229635e86c0e3781a361126c140ca9 (diff)
parenta37605e3d7d17e322a9cf2a497768f6fd8b5d0a3 (diff)
downloadlingo-295dd1906a98913275145c5b9cc403f1e76cfd33.tar.gz
lingo-295dd1906a98913275145c5b9cc403f1e76cfd33.tar.bz2
lingo-295dd1906a98913275145c5b9cc403f1e76cfd33.zip
Merge branch 'main' of /srv/git/lingo into main
Diffstat (limited to 'rails/test/dummy/config/initializers/content_security_policy.rb')
-rw-r--r--rails/test/dummy/config/initializers/content_security_policy.rb25
1 files changed, 0 insertions, 25 deletions
diff --git a/rails/test/dummy/config/initializers/content_security_policy.rb b/rails/test/dummy/config/initializers/content_security_policy.rb deleted file mode 100644 index 54f47cf..0000000 --- a/rails/test/dummy/config/initializers/content_security_policy.rb +++ /dev/null
@@ -1,25 +0,0 @@
1# Be sure to restart your server when you modify this file.
2
3# Define an application-wide content security policy.
4# See the Securing Rails Applications Guide for more information:
5# https://guides.rubyonrails.org/security.html#content-security-policy-header
6
7# Rails.application.configure do
8# config.content_security_policy do |policy|
9# policy.default_src :self, :https
10# policy.font_src :self, :https, :data
11# policy.img_src :self, :https, :data
12# policy.object_src :none
13# policy.script_src :self, :https
14# policy.style_src :self, :https
15# # Specify URI for violation reports
16# # policy.report_uri "/csp-violation-report-endpoint"
17# end
18#
19# # Generate session nonces for permitted importmap and inline scripts
20# config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s }
21# config.content_security_policy_nonce_directives = %w(script-src)
22#
23# # Report violations without enforcing the policy.
24# # config.content_security_policy_report_only = true
25# end