Contents

# frozen_string_literal: true

class Rails::ApplicationController < ActionController::Base # :nodoc:
  self.view_paths = File.expand_path("templates", __dir__)
  layout "application"

  before_action :disable_content_security_policy_nonce!

  content_security_policy do |policy|
    policy.script_src :unsafe_inline
    policy.style_src :unsafe_inline
  end

  private

    def require_local!
      unless local_request?
        render html: "<p>For security purposes, this information is only available to local requests.</p>".html_safe, status: :forbidden
      end
    end

    def local_request?
      Rails.application.config.consider_all_requests_local || request.local?
    end

    def disable_content_security_policy_nonce!
      request.content_security_policy_nonce_generator = nil
    end
end

Version data entries

64 entries across 56 versions & 6 rubygems

Version	Path
railties-5.2.8.1	lib/rails/application_controller.rb
railties-5.2.8	lib/rails/application_controller.rb
railties-5.2.7.1	lib/rails/application_controller.rb
railties-5.2.7	lib/rails/application_controller.rb
railties-5.2.6.3	lib/rails/application_controller.rb
railties-5.2.6.2	lib/rails/application_controller.rb
railties-5.2.6.1	lib/rails/application_controller.rb
railties-5.2.6	lib/rails/application_controller.rb
railties-5.2.4.6	lib/rails/application_controller.rb
railties-5.2.5	lib/rails/application_controller.rb
railties-5.2.4.5	lib/rails/application_controller.rb
railties-5.2.4.4	lib/rails/application_controller.rb
railties-5.2.4.3	lib/rails/application_controller.rb
railties-6.0.2.2	lib/rails/application_controller.rb
railties-5.2.4.2	lib/rails/application_controller.rb
argon-1.3.1	vendor/bundle/ruby/2.7.0/gems/railties-6.0.2.1/lib/rails/application_controller.rb
symbolic_enum-1.1.5	vendor/bundle/ruby/2.7.0/gems/railties-6.0.2.1/lib/rails/application_controller.rb
railties-6.0.2.1	lib/rails/application_controller.rb
railties-5.2.4.1	lib/rails/application_controller.rb
railties-6.0.2	lib/rails/application_controller.rb