Class: RnStack::SecurityGenerator

Inherits:
Rails::Generators::Base
  • Object
show all
Defined in:
lib/generators/rn_stack/security/security_generator.rb

Instance Method Summary collapse

Instance Method Details

#setup_security ⇒ Object 



5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
 
# File 'lib/generators/rn_stack/security/security_generator.rb', line 5

def setup_security
  say "Configuring Content Security Policy (CSP) and Security Headers..."
  # Create secure initializer
  create_file "config/initializers/content_security_policy.rb", "    Rails.application.configure do\n      config.content_security_policy do |policy|\n        policy.default_src :self, :https\n        policy.font_src    :self, :https, :data\n        policy.img_src     :self, :https, :data\n        policy.object_src  :none\n        policy.script_src  :self, :https\n        policy.style_src   :self, :https\n      end\n    end\n  RUBY\n  say \"Security policy initialized in config/initializers/content_security_policy.rb\"\nend\n"