Marten::Middleware::ContentSecurityPolicy
Inherits Marten::Middleware / Reference / Object
Sets the Content-Security-Policy header in the response if it wasn't already set.
This middleware guarantees the presence of the Content-Security-Policy header in the response's headers. This header provides clients with the ability to limit the allowed sources of different types of content.
By default, the middleware will include a Content-Security-Policy header that corresponds to the policy defined in
the content_security_policy settings. However, if a Marten::HTTP::ContentSecurityPolicy object is explicitly
assigned to the request object, it will take precedence over the default policy and be used instead.
Instance methods
Calls the middleware for a given HTTP request and returns a HTTP response.
This method must be implemented by subclasses: it takes a request argument (the current HTTP request) and a
get_response proc that allows to get the final response. This proc might actually call the next middleware in
the chain of configured middlewares, or the final matched handler. That way, the current middleware have the
ability to intercept any incoming request and the associated response, and to modify them if applicable.