Class: ActionDispatch::ContentSecurityPolicy
- Inherits:
-
Object
- Object
- ActionDispatch::ContentSecurityPolicy
show all
- Defined in:
- lib/action_dispatch/http/content_security_policy.rb
Defined Under Namespace
Modules: Request
Classes: Middleware
Instance Attribute Summary collapse
Instance Method Summary
collapse
Constructor Details
Returns a new instance of ContentSecurityPolicy.
140
141
142
143
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 140
def initialize
@directives = {}
yield self if block_given?
end
|
Instance Attribute Details
#directives ⇒ Object
Returns the value of attribute directives.
138
139
140
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 138
def directives
@directives
end
|
Instance Method Details
#block_all_mixed_content(enabled = true) ⇒ Object
159
160
161
162
163
164
165
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 159
def block_all_mixed_content(enabled = true)
if enabled
@directives["block-all-mixed-content"] = true
else
@directives.delete("block-all-mixed-content")
end
end
|
#build(context = nil, nonce = nil) ⇒ Object
205
206
207
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 205
def build(context = nil, nonce = nil)
build_directives(context, nonce).compact.join("; ")
end
|
#initialize_copy(other) ⇒ Object
145
146
147
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 145
def initialize_copy(other)
@directives = other.directives.deep_dup
end
|
#plugin_types(*types) ⇒ Object
167
168
169
170
171
172
173
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 167
def plugin_types(*types)
if types.first
@directives["plugin-types"] = types
else
@directives.delete("plugin-types")
end
end
|
#report_uri(uri) ⇒ Object
175
176
177
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 175
def report_uri(uri)
@directives["report-uri"] = [uri]
end
|
#require_sri_for(*types) ⇒ Object
179
180
181
182
183
184
185
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 179
def require_sri_for(*types)
if types.first
@directives["require-sri-for"] = types
else
@directives.delete("require-sri-for")
end
end
|
#sandbox(*values) ⇒ Object
187
188
189
190
191
192
193
194
195
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 187
def sandbox(*values)
if values.empty?
@directives["sandbox"] = true
elsif values.first
@directives["sandbox"] = values
else
@directives.delete("sandbox")
end
end
|
#upgrade_insecure_requests(enabled = true) ⇒ Object
197
198
199
200
201
202
203
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 197
def upgrade_insecure_requests(enabled = true)
if enabled
@directives["upgrade-insecure-requests"] = true
else
@directives.delete("upgrade-insecure-requests")
end
end
|