instance method `block_all_mixed_content`

Ruby on Rails 8.0.4

Since v5.2.8.1

Available in: v5.2.8.1 v6.0.6 v6.1.7.10 v7.0.10 v7.1.6 v7.2.3 v8.0.4 v8.1.2

Compare with:

block_all_mixed_content(enabled = true)

Specify whether to prevent the user agent from loading any assets over HTTP when the page uses HTTPS:

policy.block_all_mixed_content

Pass false to allow it again:

policy.block_all_mixed_content false

Parameters

enabled opt = true

Source

# File actionpack/lib/action_dispatch/http/content_security_policy.rb, line 210
    def block_all_mixed_content(enabled = true)
      if enabled
        @directives["block-all-mixed-content"] = true
      else
        @directives.delete("block-all-mixed-content")
      end
    end

Defined in actionpack/lib/action_dispatch/http/content_security_policy.rb line 210 · View on GitHub · Improve this page · Find usages on GitHub

Defined in ActionDispatch::ContentSecurityPolicy

Signature

Parameters