Class: ActionDispatch::ContentSecurityPolicy

Inherits:
Object
  • Object
show all
Defined in:
lib/action_dispatch/http/content_security_policy.rb

Defined Under Namespace

Modules: Request Classes: Middleware

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize {|_self| ... } ⇒ ContentSecurityPolicy

Returns a new instance of ContentSecurityPolicy.

Yields:

  • (_self)

Yield Parameters:



143
144
145
146
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 143

def initialize
  @directives = {}
  yield self if block_given?
end

Instance Attribute Details

#directives ⇒ Object (readonly)

Returns the value of attribute directives.



141
142
143
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 141

def directives
  @directives
end

Instance Method Details

#block_all_mixed_content(enabled = true) ⇒ Object 



162
163
164
165
166
167
168
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 162

def block_all_mixed_content(enabled = true)
  if enabled
    @directives["block-all-mixed-content"] = true
  else
    @directives.delete("block-all-mixed-content")
  end
end

#build(context = nil, nonce = nil, nonce_directives = nil) ⇒ Object 



208
209
210
211
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 208

def build(context = nil, nonce = nil, nonce_directives = nil)
  nonce_directives = DEFAULT_NONCE_DIRECTIVES if nonce_directives.nil?
  build_directives(context, nonce, nonce_directives).compact.join("; ")
end

#initialize_copy(other) ⇒ Object 



148
149
150
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 148

def initialize_copy(other)
  @directives = other.directives.deep_dup
end

#plugin_types(*types) ⇒ Object 



170
171
172
173
174
175
176
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 170

def plugin_types(*types)
  if types.first
    @directives["plugin-types"] = types
  else
    @directives.delete("plugin-types")
  end
end

#report_uri(uri) ⇒ Object 



178
179
180
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 178

def report_uri(uri)
  @directives["report-uri"] = [uri]
end

#require_sri_for(*types) ⇒ Object 



182
183
184
185
186
187
188
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 182

def require_sri_for(*types)
  if types.first
    @directives["require-sri-for"] = types
  else
    @directives.delete("require-sri-for")
  end
end

#sandbox(*values) ⇒ Object 



190
191
192
193
194
195
196
197
198
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 190

def sandbox(*values)
  if values.empty?
    @directives["sandbox"] = true
  elsif values.first
    @directives["sandbox"] = values
  else
    @directives.delete("sandbox")
  end
end

#upgrade_insecure_requests(enabled = true) ⇒ Object 



200
201
202
203
204
205
206
 
# File 'lib/action_dispatch/http/content_security_policy.rb', line 200

def upgrade_insecure_requests(enabled = true)
  if enabled
    @directives["upgrade-insecure-requests"] = true
  else
    @directives.delete("upgrade-insecure-requests")
  end
end