Marten::Handlers::ContentSecurityPolicy::ClassMethods

Allows to define a custom Content-Security-Policy that will be used for the considered handler only.

This method yields a Marten::HTTP::ContentSecurityPolicy object that you can use to fully configure the directives that get inserted in the Content-Security-Policy header.

class MyHandler < Marten::Handler
  content_security_policy do |csp|
    csp.default_src = {:self, "example.com"}
  end
end

Allows to define whether or not the handler responses should be exempted from using Content-Security-Policy.

Note that this method is only useful when the Marten::Middleware::ContentSecurityPolicy middleware is being used.

Returns a boolean indicating if the handler is exempted from using the Content-Security-Policy header.