Class: SecureHeaders::ContentSecurityPolicy::ScriptHashMiddleware

Inherits:
Object
  • Object
show all
Defined in:
lib/secure_headers/headers/content_security_policy/script_hash_middleware.rb

Instance Method Summary collapse

Constructor Details

#initialize(app) ⇒ ScriptHashMiddleware

Returns a new instance of ScriptHashMiddleware.



4
5
6
 
# File 'lib/secure_headers/headers/content_security_policy/script_hash_middleware.rb', line 4

def initialize(app)
  @app = app
end

Instance Method Details

#call(env) ⇒ Object 



8
9
10
11
12
13
14
15
16
17
18
19
 
# File 'lib/secure_headers/headers/content_security_policy/script_hash_middleware.rb', line 8

def call(env)
  status, headers, response = @app.call(env)
  metadata = env[ContentSecurityPolicy::ENV_KEY]
  if !metadata.nil?
    config, options = metadata.values_at(:config, :options)
    config.merge!(:script_hashes => env[HASHES_ENV_KEY])
    csp_header = ContentSecurityPolicy.new(config, options)
    headers[csp_header.name] = csp_header.value
  end

  [status, headers, response]
end