File tree Expand file tree Collapse file tree 1 file changed +1
-31
lines changed
Expand file tree Collapse file tree 1 file changed +1
-31
lines changed Original file line number Diff line number Diff line change @@ -9,35 +9,9 @@ The gem will automatically apply several headers that are related to security.
99- X-Download-Options - [ Prevent file downloads opening] ( http://msdn.microsoft.com/en-us/library/ie/jj542450(v=vs.85).aspx )
1010- X-Permitted-Cross-Domain-Policies - [ Restrict Adobe Flash Player's access to data] ( https://www.adobe.com/devnet/adobe-media-server/articles/cross-domain-xml-for-streaming.html )
1111
12- This gem has integration with Rails, but works for any Ruby code. See the sinatra example section.
13-
14- ## Installation
15-
16- Add to your Gemfile
17-
18- ``` ruby
19- gem ' secure_headers'
20- ```
21-
22- And then execute:
23-
24- ``` console
25- $ bundle
26- ```
27-
28- Or install it yourself as:
29-
30- ``` console
31- $ gem install secure_headers
32- ```
33-
3412## Usage
3513
36- Functionality provided
37-
38- - ` ensure_security_headers ` : will set security-related headers automatically based on the configuration below.
39-
40- By default, it will set all of the headers listed in the options section below unless specified.
14+ - ` ensure_security_headers ` in a controller will set security-related headers automatically based on the configuration below.
4115
4216### Disabling
4317
@@ -118,10 +92,6 @@ This configuration will likely work for most applications without modification.
11892
11993### Content Security Policy (CSP)
12094
121- All browsers will receive the webkit csp header except Firefox, which gets its own header.
122- See [ WebKit specification] ( http://www.w3.org/TR/CSP/ )
123- and [ Mozilla CSP specification] ( https://wiki.mozilla.org/Security/CSP/Specification )
124-
12595``` ruby
12696:csp => {
12797 :enforce => false , # sets header to report-only, by default
You can’t perform that action at this time.
0 commit comments