summary refs log tree commit diff stats
path: root/rails/test/dummy/config/initializers/content_security_policy.rb
diff options
context:
space:
mode:
authorStar Rauchenberger <fefferburbia@gmail.com>2023-11-29 23:20:31 -0500
committerStar Rauchenberger <fefferburbia@gmail.com>2023-11-29 23:20:31 -0500
commitece62b9eb3e2f3995715c32608f1de91d98a22be (patch)
tree2322ac861fe821362a893870d5b2c441132f2204 /rails/test/dummy/config/initializers/content_security_policy.rb
parent83437f5895fd4f110694e66c9d939ff492bc2e1b (diff)
downloadlingo-ece62b9eb3e2f3995715c32608f1de91d98a22be.tar.gz
lingo-ece62b9eb3e2f3995715c32608f1de91d98a22be.tar.bz2
lingo-ece62b9eb3e2f3995715c32608f1de91d98a22be.zip
Rails engine no longer needed
Diffstat (limited to 'rails/test/dummy/config/initializers/content_security_policy.rb')
-rw-r--r--rails/test/dummy/config/initializers/content_security_policy.rb25
1 files changed, 0 insertions, 25 deletions
diff --git a/rails/test/dummy/config/initializers/content_security_policy.rb b/rails/test/dummy/config/initializers/content_security_policy.rb deleted file mode 100644 index 54f47cf..0000000 --- a/rails/test/dummy/config/initializers/content_security_policy.rb +++ /dev/null
@@ -1,25 +0,0 @@
1# Be sure to restart your server when you modify this file.
2
3# Define an application-wide content security policy.
4# See the Securing Rails Applications Guide for more information:
5# https://guides.rubyonrails.org/security.html#content-security-policy-header
6
7# Rails.application.configure do
8# config.content_security_policy do |policy|
9# policy.default_src :self, :https
10# policy.font_src :self, :https, :data
11# policy.img_src :self, :https, :data
12# policy.object_src :none
13# policy.script_src :self, :https
14# policy.style_src :self, :https
15# # Specify URI for violation reports
16# # policy.report_uri "/csp-violation-report-endpoint"
17# end
18#
19# # Generate session nonces for permitted importmap and inline scripts
20# config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s }
21# config.content_security_policy_nonce_directives = %w(script-src)
22#
23# # Report violations without enforcing the policy.
24# # config.content_security_policy_report_only = true
25# end