diff options
| author | Star Rauchenberger <fefferburbia@gmail.com> | 2022-12-10 12:32:44 -0500 |
|---|---|---|
| committer | Star Rauchenberger <fefferburbia@gmail.com> | 2022-12-10 12:32:44 -0500 |
| commit | 230ab3079fd4e16ebaa593f6cc5fdbcbad3c2321 (patch) | |
| tree | b61b7d4c706de43361da73cce0d2a2a006a89b18 /config/initializers/content_security_policy.rb | |
| parent | dc7253d0b71f25c2e9a4547d414fa18390b74fbf (diff) | |
| download | thoughts-230ab3079fd4e16ebaa593f6cc5fdbcbad3c2321.tar.gz thoughts-230ab3079fd4e16ebaa593f6cc5fdbcbad3c2321.tar.bz2 thoughts-230ab3079fd4e16ebaa593f6cc5fdbcbad3c2321.zip | |
Installed LINGO scoreboard
Diffstat (limited to 'config/initializers/content_security_policy.rb')
| -rw-r--r-- | config/initializers/content_security_policy.rb | 25 |
1 files changed, 25 insertions, 0 deletions
| diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb new file mode 100644 index 0000000..54f47cf --- /dev/null +++ b/config/initializers/content_security_policy.rb | |||
| @@ -0,0 +1,25 @@ | |||
| 1 | # Be sure to restart your server when you modify this file. | ||
| 2 | |||
| 3 | # Define an application-wide content security policy. | ||
| 4 | # See the Securing Rails Applications Guide for more information: | ||
| 5 | # https://guides.rubyonrails.org/security.html#content-security-policy-header | ||
| 6 | |||
| 7 | # Rails.application.configure do | ||
| 8 | # config.content_security_policy do |policy| | ||
| 9 | # policy.default_src :self, :https | ||
| 10 | # policy.font_src :self, :https, :data | ||
| 11 | # policy.img_src :self, :https, :data | ||
| 12 | # policy.object_src :none | ||
| 13 | # policy.script_src :self, :https | ||
| 14 | # policy.style_src :self, :https | ||
| 15 | # # Specify URI for violation reports | ||
| 16 | # # policy.report_uri "/csp-violation-report-endpoint" | ||
| 17 | # end | ||
| 18 | # | ||
| 19 | # # Generate session nonces for permitted importmap and inline scripts | ||
| 20 | # config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s } | ||
| 21 | # config.content_security_policy_nonce_directives = %w(script-src) | ||
| 22 | # | ||
| 23 | # # Report violations without enforcing the policy. | ||
| 24 | # # config.content_security_policy_report_only = true | ||
| 25 | # end | ||
