class CspReport::CspDeclarationGenerator
Public Instance Methods
setup_filter()
click to toggle source
# File lib/generators/csp_report/csp_declaration_generator.rb, line 4 def setup_filter inject_into_file "app/controllers/application_controller.rb", after: "ApplicationController < ActionController::Base\n" do <<-CONTENT before_filter :csp def csp policy = "default *;" policy << "script-src 'self';" policy << "report-uri /\#{CspReport::MOUNT_POINT}/csp_reports" response.headers['Content-Security-Policy'] = policy end CONTENT end end