Skip to content

Add default parameter to content_security_policy_nonce for Rails compatibility #571

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
Copilot wants to merge 10 commits into
base: main
Choose a base branch
from
Draft

Add default parameter to content_security_policy_nonce for Rails compatibility #571

Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
d133044
fix(cookies): fix compatibility with rack 3
deril May 20, 2025
9bc0b6c
Remove non-lowercase headers in Rails default configuration (fixes #541)
obrie Mar 20, 2025
3334929
normalize domains with trailing slashes
keithamus Mar 30, 2022
7f19fb2
Fix tests (sources are no longer minified since #499)
fletchto99 Dec 16, 2025
b3557f7
Refactor rake task methods into module for better testing
rahearn Jun 2, 2022
5932e97
Initial plan
Copilot Dec 17, 2025
9b8201a
Fix content_security_policy_nonce to work without parameters for Rail…
Copilot Dec 17, 2025
3ba2401
Fix rubocop trailing whitespace issues
Copilot Dec 17, 2025
b6fb703
Address code review feedback: remove unnecessary begin blocks
Copilot Dec 17, 2025
bd6196a
Improve documentation clarity based on code review feedback
Copilot Dec 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Fix tests (sources are no longer minified since #499)
  • Loading branch information
@fletchto99 @denn-os
fletchto99 authored and denn-os committed Dec 17, 2025
commit 7f19fb27a9c437e75976f40fab2ad0bf6c81f793
2 changes: 1 addition & 1 deletion spec/lib/secure_headers/headers/content_security_policy_spec.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,7 +61,7 @@ module SecureHeaders
default_src: %w(a.example.org b.example.org *.example.org https://*.example.org c.example.org/)
}
csp = ContentSecurityPolicy.new(config)
expect(csp.value).to eq("default-src a.example.org b.example.org *.example.org")
expect(csp.value).to eq("default-src a.example.org b.example.org *.example.org c.example.org")
end

it "removes http/s schemes from hosts" do
Expand Down