class CspReport::CspDeclarationGenerator

Public Instance Methods

setup_filter() click to toggle source
# File lib/generators/csp_report/csp_declaration_generator.rb, line 4
    def setup_filter
      inject_into_file "app/controllers/application_controller.rb",
        after: "ApplicationController < ActionController::Base\n" do
<<-CONTENT

  before_filter :csp

  def csp
    policy =  "default *;"
    policy << "script-src 'self';"
    policy << "report-uri /\#{CspReport::MOUNT_POINT}/csp_reports"
    response.headers['Content-Security-Policy'] = policy
  end

CONTENT
        end
    end