Contents

# frozen_string_literal: true

module AAF
  module SecureHeaders
    class DisableSecureHeadersForErrorPages
      def initialize(app)
        @app = app
      end

      def call(env)
        @app.call(env).tap do |(status, _, _)|
          next if status < 400
          request = ActionDispatch::Request.new(env)
          ::SecureHeaders.opt_out_of_all_protection(request)
        end
      end
    end
  end
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
aaf-secure_headers-3.1.0	lib/aaf/secure_headers/disable_secure_headers_for_error_pages.rb
aaf-secure_headers-3.0.0	lib/aaf/secure_headers/disable_secure_headers_for_error_pages.rb
aaf-secure_headers-2.0.0	lib/aaf/secure_headers/disable_secure_headers_for_error_pages.rb
aaf-secure_headers-1.1.0	lib/aaf/secure_headers/disable_secure_headers_for_error_pages.rb