Module: Tynn::Protection

Defined in:
lib/tynn/protection.rb

Overview

Public: Adds security measures against common attacks.

Examples

require "tynn"
require "tynn/protection"

Tynn.plugin(Tynn::Protection)

If you are using SSL/TLS (HTTPS), it’s recommended to set the :ssl option:

Examples

require "tynn"
require "tynn/protection"

Tynn.plugin(Tynn::Protection, ssl: true)

By default, it includes the following security plugins:

  • Tynn::SecureHeaders

If the :ssl option is true, includes:

  • Tynn::HSTS

  • Tynn::ForceSSL

Class Method Summary collapse

Class Method Details

.setup(app, ssl: false, force_ssl: ssl, hsts: {}) ⇒ Object

Internal: Configures security related plugins.



35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
 
# File 'lib/tynn/protection.rb', line 35

def self.setup(app, ssl: false, force_ssl: ssl, hsts: {})
  app.plugin(Tynn::SecureHeaders)

  if ssl
    app.settings[:ssl] = true

    require_relative "hsts"

    app.plugin(Tynn::HSTS, hsts)
  end

  if force_ssl
    require_relative "force_ssl"

    app.plugin(Tynn::ForceSSL)
  end
end