Class: CspReport::CspDeclarationGenerator

Inherits:
Rails::Generators::Base
  • Object
show all
Defined in:
lib/generators/csp_report/csp_declaration_generator.rb

Instance Method Summary collapse

Instance Method Details

#setup_filter ⇒ Object 



4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
 
# File 'lib/generators/csp_report/csp_declaration_generator.rb', line 4

def setup_filter
  inject_into_file "app/controllers/application_controller.rb",
    after: "ApplicationController < ActionController::Base\n" do
<<-CONTENT

  before_filter :csp

  def csp
policy =  "default *;"
policy << "script-src 'self';"
policy << "report-uri /\#{CspReport::MOUNT_POINT}/csp_reports"
response.headers['Content-Security-Policy'] = policy
  end

CONTENT
    end
end