Class: I18nProofreading::WidgetsController

Inherits:

ApplicationController

• Object
• ActionController::Base
• ApplicationController
• I18nProofreading::WidgetsController

Defined in:

app/controllers/i18n_proofreading/widgets_controller.rb

Overview

Serves the widget JavaScript as a plain same-origin script. Same-origin matters: under a script-src 'self' (or nonce-based) CSP, an external script from the app's own host is always allowed — including when Turbo Drive swaps the and re-runs body scripts under the original page's CSP header, where a freshly minted inline nonce would be refused.

Instance Method Summary

• #dashboard_stylesheet ⇒ Object
• #show ⇒ Object

  The script URL carries a content fingerprint (?v=), so stale code is structurally impossible: new code means a new URL.

Instance Method Details

#dashboard_stylesheet ⇒ Object

# File 'app/controllers/i18n_proofreading/widgets_controller.rb', line 23

def dashboard_stylesheet
  serve(Widget.dashboard_stylesheet, Widget.dashboard_stylesheet_fingerprint, 'text/css')
end

#show ⇒ Object

The script URL carries a content fingerprint (?v=), so stale code is structurally impossible: new code means a new URL. The canonical fingerprinted URL is immutable and gets long-lived caching; anything else only ETag-revalidates.

# File 'app/controllers/i18n_proofreading/widgets_controller.rb', line 19

def show
  serve(Widget.javascript, Widget.fingerprint, 'text/javascript')
end