Method: Hanami::Config::Actions::ContentSecurityPolicy#initialize

Defined in:
lib/hanami/config/actions/content_security_policy.rb

#initialize(&blk) ⇒ ContentSecurityPolicy

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

Returns a new instance of ContentSecurityPolicy.

Since:

  • 2.0.0



12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
 
# File 'lib/hanami/config/actions/content_security_policy.rb', line 12

def initialize(&blk)
  @policy = {
    base_uri: "'self'",
    child_src: "'self'",
    connect_src: "'self'",
    default_src: "'none'",
    font_src: "'self'",
    form_action: "'self'",
    frame_ancestors: "'self'",
    frame_src: "'self'",
    img_src: "'self' https: data:",
    media_src: "'self'",
    object_src: "'none'",
    script_src: "'self'",
    style_src: "'self' 'unsafe-inline' https:"
  }

  blk&.(self)
end