Module: ActionDispatch::ContentSecurityPolicy::Request

Included in:
Request
Defined in:
actionpack/lib/action_dispatch/http/content_security_policy.rb

Constant Summary collapse

POLICY = 
"action_dispatch.content_security_policy"
POLICY_REPORT_ONLY = 
"action_dispatch.content_security_policy_report_only"
NONCE_GENERATOR = 
"action_dispatch.content_security_policy_nonce_generator"
NONCE = 
"action_dispatch.content_security_policy_nonce"
NONCE_DIRECTIVES = 
"action_dispatch.content_security_policy_nonce_directives"

Instance Method Summary collapse

Instance Method Details

#content_security_policy ⇒ Object 



76
77
78
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 76

def content_security_policy
  get_header(POLICY)
end

#content_security_policy=(policy) ⇒ Object 



80
81
82
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 80

def content_security_policy=(policy)
  set_header(POLICY, policy)
end

#content_security_policy_nonce ⇒ Object 



108
109
110
111
112
113
114
115
116
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 108

def content_security_policy_nonce
  if content_security_policy_nonce_generator
    if nonce = get_header(NONCE)
      nonce
    else
      set_header(NONCE, generate_content_security_policy_nonce)
    end
  end
end

#content_security_policy_nonce_directives ⇒ Object 



100
101
102
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 100

def content_security_policy_nonce_directives
  get_header(NONCE_DIRECTIVES)
end

#content_security_policy_nonce_directives=(generator) ⇒ Object 



104
105
106
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 104

def content_security_policy_nonce_directives=(generator)
  set_header(NONCE_DIRECTIVES, generator)
end

#content_security_policy_nonce_generator ⇒ Object 



92
93
94
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 92

def content_security_policy_nonce_generator
  get_header(NONCE_GENERATOR)
end

#content_security_policy_nonce_generator=(generator) ⇒ Object 



96
97
98
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 96

def content_security_policy_nonce_generator=(generator)
  set_header(NONCE_GENERATOR, generator)
end

#content_security_policy_report_only ⇒ Object 



84
85
86
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 84

def content_security_policy_report_only
  get_header(POLICY_REPORT_ONLY)
end

#content_security_policy_report_only=(value) ⇒ Object 



88
89
90
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 88

def content_security_policy_report_only=(value)
  set_header(POLICY_REPORT_ONLY, value)
end