Skip to content

Commit 548b03c

Browse files
committed
Update README.md
1 parent 97bff54 commit 548b03c

File tree

1 file changed

+1
-31
lines changed

1 file changed

+1
-31
lines changed

README.md

Lines changed: 1 addition & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -9,35 +9,9 @@ The gem will automatically apply several headers that are related to security.
99
- X-Download-Options - [Prevent file downloads opening](http://msdn.microsoft.com/en-us/library/ie/jj542450(v=vs.85).aspx)
1010
- X-Permitted-Cross-Domain-Policies - [Restrict Adobe Flash Player's access to data](https://www.adobe.com/devnet/adobe-media-server/articles/cross-domain-xml-for-streaming.html)
1111

12-
This gem has integration with Rails, but works for any Ruby code. See the sinatra example section.
13-
14-
## Installation
15-
16-
Add to your Gemfile
17-
18-
```ruby
19-
gem 'secure_headers'
20-
```
21-
22-
And then execute:
23-
24-
```console
25-
$ bundle
26-
```
27-
28-
Or install it yourself as:
29-
30-
```console
31-
$ gem install secure_headers
32-
```
33-
3412
## Usage
3513

36-
Functionality provided
37-
38-
- `ensure_security_headers`: will set security-related headers automatically based on the configuration below.
39-
40-
By default, it will set all of the headers listed in the options section below unless specified.
14+
- `ensure_security_headers` in a controller will set security-related headers automatically based on the configuration below.
4115

4216
### Disabling
4317

@@ -118,10 +92,6 @@ This configuration will likely work for most applications without modification.
11892

11993
### Content Security Policy (CSP)
12094

121-
All browsers will receive the webkit csp header except Firefox, which gets its own header.
122-
See [WebKit specification](http://www.w3.org/TR/CSP/)
123-
and [Mozilla CSP specification](https://wiki.mozilla.org/Security/CSP/Specification)
124-
12595
```ruby
12696
:csp => {
12797
:enforce => false, # sets header to report-only, by default

0 commit comments

Comments
 (0)