Contents

module Answers
  class ApplicationController < ActionController::Base

    protect_from_forgery with: :null_session

    ensure_security_headers(
      :hsts => {:max_age => 631138519, :include_subdomains => false},
      :x_frame_options  => {:value => 'SAMEORIGIN'},
      :x_xss_protection => {:value => 1, :mode => 'block'},
      :x_content_type_options => {:value => 'nosniff'},
      :csp => false
    )

    def redirect_to_back(default = root_url)
      if !request.env["HTTP_REFERER"].blank? and request.env["HTTP_REFERER"] != request.env["REQUEST_URI"]
        redirect_to :back
      else
        redirect_to default
      end
    end

    def after_sign_in_path_for(resource_or_scope)
      path = stored_location_for(resource_or_scope) || signed_in_root_path(resource_or_scope)
      "/#{path}" if path[0] != "/" # hackity hack
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
answers-core-0.0.0.2	app/controllers/answers/application_controller.rb
answers-core-0.0.0	app/controllers/answers/application_controller.rb