class ContentSecurityPolicy
Ruby on Rails 8.0.4
Since v5.2.8.1Action Dispatch Content Security Policy
Configures the HTTP Content-Security-Policy response header to help protect against XSS and injection attacks.
Example global policy:
Rails.application.config.content_security_policy do |policy| policy.default_src :self, :https policy.font_src :self, :https, :data policy.img_src :self, :https, :data policy.object_src :none policy.script_src :self, :https policy.style_src :self, :https # Specify URI for violation reports policy.report_uri "/csp-violation-report-endpoint" end
Inherits from
Namespace
Modules
Classes
Constants
Attributes
Methods (defined here)
- # block_all_mixed_content
- # build
- # initialize_copy
- # plugin_types
- # report_uri
- # require_sri_for
- # sandbox
- # upgrade_insecure_requests
- self. new
Private methods
(8)
Implementation detail — not part of the public API.
Methods (inherited)
From Object (17)
- # acts_like?
- # blank?
- # deep_dup
- # duplicable?
- # html_safe?
- # in?
- # instance_values
- # instance_variable_names
- # presence
- # presence_in
- # present?
- # to_param
- # to_query
- # try
- # try!
- # with
- # with_options
From ActiveSupport::NumericWithFormat (2)
- # to_formatted_s
- # to_fs