Class: Testimonials::WidgetsController

Inherits:

ApplicationController

• Object
• ActionController::Base
• ApplicationController
• Testimonials::WidgetsController

Defined in:

app/controllers/testimonials/widgets_controller.rb

Overview

Serves the widget JavaScript as a plain same-origin script. Same-origin matters: under a script-src 'self' (or nonce-based) CSP, an external script from the app's own host is always allowed — including when Turbo Drive swaps the and re-runs body scripts under the original page's CSP header, where a freshly minted inline nonce would be refused.

Instance Method Summary

• #dashboard ⇒ Object
• #show ⇒ Object

  The script URLs carry a content fingerprint (?v=), so stale code is structurally impossible: new code means a new URL.

Instance Method Details

#dashboard ⇒ Object

# File 'app/controllers/testimonials/widgets_controller.rb', line 23

def dashboard
  serve(Widget.dashboard_javascript, Widget.dashboard_fingerprint)
end

#show ⇒ Object

The script URLs carry a content fingerprint (?v=), so stale code is structurally impossible: new code means a new URL. The canonical fingerprinted URL is immutable and gets long-lived caching; anything else only ETag-revalidates.

# File 'app/controllers/testimonials/widgets_controller.rb', line 19

def show
  serve(Widget.javascript, Widget.fingerprint)
end