Contents

# frozen_string_literal: true
module GoodJob
  class BaseController < ActionController::Base # rubocop:disable Rails/ApplicationController
    protect_from_forgery with: :exception

    around_action :switch_locale

    content_security_policy do |policy|
      policy.default_src(:none) if policy.default_src(*policy.default_src).blank?
      policy.connect_src(:self) if policy.connect_src(*policy.connect_src).blank?
      policy.base_uri(:none) if policy.base_uri(*policy.base_uri).blank?
      policy.font_src(:self) if policy.font_src(*policy.font_src).blank?
      policy.img_src(:self, :data) if policy.img_src(*policy.img_src).blank?
      policy.object_src(:none) if policy.object_src(*policy.object_src).blank?
      policy.script_src(:self) if policy.script_src(*policy.script_src).blank?
      policy.style_src(:self) if policy.style_src(*policy.style_src).blank?
      policy.form_action(:self) if policy.form_action(*policy.form_action).blank?
      policy.frame_ancestors(:none) if policy.frame_ancestors(*policy.frame_ancestors).blank?
    end

    before_action do
      next if request.content_security_policy_nonce_generator

      request.content_security_policy_nonce_generator = ->(_request) { SecureRandom.base64(16) }
    end

    private

    def switch_locale(&action)
      I18n.with_locale(:en, &action)
    end
  end
end

Version data entries

18 entries across 18 versions & 1 rubygems

Version	Path
good_job-2.11.3	engine/app/controllers/good_job/base_controller.rb
good_job-2.11.2	engine/app/controllers/good_job/base_controller.rb
good_job-2.11.1	engine/app/controllers/good_job/base_controller.rb
good_job-2.11.0	engine/app/controllers/good_job/base_controller.rb
good_job-2.10.0	engine/app/controllers/good_job/base_controller.rb
good_job-2.9.6	engine/app/controllers/good_job/base_controller.rb
good_job-2.9.5	engine/app/controllers/good_job/base_controller.rb
good_job-2.9.4	engine/app/controllers/good_job/base_controller.rb
good_job-2.9.3	engine/app/controllers/good_job/base_controller.rb
good_job-2.9.2	engine/app/controllers/good_job/base_controller.rb
good_job-2.9.1	engine/app/controllers/good_job/base_controller.rb
good_job-2.9.0	engine/app/controllers/good_job/base_controller.rb
good_job-2.8.1	engine/app/controllers/good_job/base_controller.rb
good_job-2.8.0	engine/app/controllers/good_job/base_controller.rb
good_job-2.7.4	engine/app/controllers/good_job/base_controller.rb
good_job-2.7.3	engine/app/controllers/good_job/base_controller.rb
good_job-2.7.2	engine/app/controllers/good_job/base_controller.rb
good_job-2.7.1	engine/app/controllers/good_job/base_controller.rb