Sha256: e8c026ae9e5ff1f6c76fcdd2345f2c529f579b8855de78f3ca8c6c828db1f0eb
Contents?: true
Size: 1.21 KB
Versions: 3
Compression:
Stored size: 1.21 KB
Contents
# rails 3.1+ if defined?(Rails::Railtie) module SecureHeaders class Railtie < Rails::Railtie isolate_namespace SecureHeaders if defined? isolate_namespace # rails 3.0 conflicting_headers = ['X-Frame-Options', 'X-XSS-Protection', 'X-Permitted-Cross-Domain-Policies', 'X-Download-Options', 'X-Content-Type-Options', 'Strict-Transport-Security', 'Content-Security-Policy', 'Content-Security-Policy-Report-Only', 'Public-Key-Pins', 'Public-Key-Pins-Report-Only'] initializer "secure_headers.middleware" do Rails.application.config.middleware.use SecureHeaders::Middleware end initializer "secure_headers.action_controller" do ActiveSupport.on_load(:action_controller) do include SecureHeaders unless Rails.application.config.action_dispatch.default_headers.nil? conflicting_headers.each do |header| Rails.application.config.action_dispatch.default_headers.delete(header) end end end end end end else module ActionController class Base include SecureHeaders end end end
Version data entries
3 entries across 3 versions & 1 rubygems
Version | Path |
---|---|
secure_headers-3.0.3 | lib/secure_headers/railtie.rb |
secure_headers-3.0.2 | lib/secure_headers/railtie.rb |
secure_headers-3.0.1 | lib/secure_headers/railtie.rb |