Sha256: 26be47c828545164653ca0c267d2a1b6e4f7d3e02b1416138a848bc1b12455e9
Contents?: true
Size: 533 Bytes
Versions: 7
Compression:
Stored size: 533 Bytes
Contents
::SecureHeaders::Configuration.configure do |config|
config.hsts = { :max_age => 10.years.to_i.to_s, :include_subdomains => false }
config.x_frame_options = 'SAMEORIGIN'
config.x_content_type_options = "nosniff"
config.x_xss_protection = {:value => 1, :mode => 'block'}
csp = {
:default_src => "self",
:script_src => "self nonce",
:disable_chrome_extension => true,
:disable_fill_missing => true,
:report_uri => 'somewhere',
:enforce => false # false means warnings only
}
config.csp = csp
end
Version data entries
7 entries across 7 versions & 1 rubygems