Skip to content

Commit 868307f

Browse files
committed
update deprecation warning for using unquoted none/self/inline/eval directive values
1 parent b102b53 commit 868307f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

lib/secure_headers/headers/content_security_policy.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -261,10 +261,10 @@ def append_http_additions
261261

262262
def translate_dir_value val
263263
if %w{inline eval}.include?(val)
264-
warn "[DEPRECATION] using inline/eval may not be supported in the future. Instead use 'unsafe-inline'/'unsafe-eval' instead."
264+
warn "[DEPRECATION] using inline/eval is not suppored in secure_headers 3.x. Instead use 'unsafe-inline'/'unsafe-eval' instead."
265265
val == 'inline' ? "'unsafe-inline'" : "'unsafe-eval'"
266266
elsif %{self none}.include?(val)
267-
warn "[DEPRECATION] using self/none may not be supported in the future. Instead use 'self'/'none' instead."
267+
warn "[DEPRECATION] using self/none is not suppored in secure_headers 3.x. Instead use 'self'/'none' instead."
268268
"'#{val}'"
269269
elsif val == 'nonce'
270270
if supports_nonces?

0 commit comments

Comments
 (0)