Sha256: a77295334e3003f6cdc4c9e69a09ff1c5a532adb4955ee2f67ba97c5eacb9b11
Contents?: true
Size: 559 Bytes
Versions: 10
Compression:
Stored size: 559 Bytes
Contents
::SecureHeaders::Configuration.configure do |config|
config.hsts = { :max_age => 10.years.to_i.to_s, :include_subdomains => false }
config.x_frame_options = 'DENY'
config.x_content_type_options = "nosniff"
config.x_xss_protection = {:value => 0}
config.x_permitted_cross_domain_policies = 'none'
csp = {
:default_src => "self",
:script_src => "self nonce",
:disable_fill_missing => true,
:report_uri => 'somewhere',
:script_hash_middleware => true,
:enforce => false # false means warnings only
}
config.csp = csp
end
Version data entries
10 entries across 10 versions & 1 rubygems