Class: Ideasbugs::WidgetsController

Inherits:

ApplicationController

• Object
• ActionController::Base
• ApplicationController
• Ideasbugs::WidgetsController

Defined in:

app/controllers/ideasbugs/widgets_controller.rb

Overview

Serves the widget JavaScript as a plain same-origin script. Same-origin matters: under a script-src 'self' (or nonce-based) CSP, an external script from the app's own host is always allowed — including when Turbo Drive swaps the and re-runs body scripts under the original page's CSP header, where a freshly minted inline nonce would be refused.

Instance Method Summary

• #show ⇒ Object

  The script URL carries a content fingerprint (?v=), so stale code is structurally impossible: new code means a new URL.

Instance Method Details

#show ⇒ Object

The script URL carries a content fingerprint (?v=), so stale code is structurally impossible: new code means a new URL. The canonical fingerprinted URL is immutable and gets long-lived caching; anything else only ETag-revalidates.

# File 'app/controllers/ideasbugs/widgets_controller.rb', line 19

def show
  expires_in 1.year, public: true if params[:v] == Widget.fingerprint
  return unless stale?(etag: [Ideasbugs::VERSION, Widget.fingerprint])

  render plain: Widget.javascript, content_type: 'text/javascript'
end