Method: ActionDispatch::ContentSecurityPolicy#require_sri_for

Defined in:
actionpack/lib/action_dispatch/http/content_security_policy.rb

#require_sri_for(*types) ⇒ Object

Specify asset types for which [Subresource Integrity](developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity) is required:

policy.require_sri_for :script, :style

Leave empty to not require Subresource Integrity:

policy.require_sri_for



250
251
252
253
254
255
256
 
# File 'actionpack/lib/action_dispatch/http/content_security_policy.rb', line 250

def require_sri_for(*types)
  if types.first
    @directives["require-sri-for"] = types
  else
    @directives.delete("require-sri-for")
  end
end