Table of Contents - secure_headers-7.1.0 Documentation
Pages
-
CHANGELOG
- 6.5.0
- 6.4.0
- 6.3.4
- 6.3.3
- 6.3.2
- 6.3.1
- 6.3.0
- 6.2.0
- 6.1.2
- 6.1.1
- 6.1
- 6.0
- 5.0.5
- 5.0.4
- 5.0.3
- 5.0.2
- 5.0.1
- 5.0.0
- 4.0.1
- 4.0
- 3.7.2
- 3.7.1
- 3.7.0
- 3.6.7
- 3.6.5
- 3.6.4
- 3.6.3
- 3.6.2
- 3.6.1
- 3.6.0
- 3.5.1
- 3.5.0
- 3.4.1 Named Appends
- Small bugfix
- Named Appends
- 3.4.0 the frame-src/child-src transition for Firefox.
- 3.3.2 minor fix to silence warnings when using rake
- 3.3.1 bugfix for boolean CSP directives
- 3.3.0 referrer-policy support
- 3.2.0 Cookie settings and CSP hash sources
- Cookies
- Boolean-based configuration
- Hash-based configuration
- SameSite cookie configuration
- Hash
- Helpers
- 3.1.2 Bug fix for regression
- 3.1.1 Bug fix for regression
- 3.1.0 Adding secure cookie support
- 3.0.3
- 3.0.2
- 3.0.1
- 3.0.0
- 2.5.1 - 2016-02-16 18:11:11 UTC - Remove noisy deprecation warning
- 2.5.0 - 2016-01-06 22:11:02 UTC - 2.x deprecation warning release
- 2.4.4 - 2015-12-03 23:29:42 UTC - Bug fix release
- 2.4.3 - 2015-10-23 18:35:43 UTC - Performance improvement
- 2.4.2 - 2015-10-20 20:22:08 UTC - Bug fix release
- 2.4.1 - 2015-10-14 22:57:41 UTC - More UA sniffing
- 2.4.0 - 2015-10-01 23:05:38 UTC - Some internal changes affecting behavior, but not functionality
- before
- after
- Workaround
- 2.3.0 - 2015-09-30 19:43:09 UTC - Add header_hash feature for use in middleware.
- 2.2.4 - 2015-08-26 23:31:37 UTC - Print deprecation warning for 1.8.7 users
- 2.2.3 - 2015-08-14 20:26:12 UTC - Adds ability to opt-out of automatically adding data: sources to img-src
- 2.2.2 - 2015-07-02 21:18:38 UTC - Another option for config granularity.
- 2.2.1 - 2015-06-24 21:01:57 UTC - When using nonces, do not include the nonce for safari / IE
- 2.2.0 - 2015-06-18 22:01:23 UTC - Pass controller reference to callable config value expressions.
- v2.1.0 - 2015-05-07 18:34:56 UTC - Add hpkp support
- v2.0.2 - 2015-05-05 03:09:44 UTC - Add report_uri constant value
- v2.0.1 - 2015-03-20 18:46:47 UTC - View Helpers Fixed
- 2.0.0 - 2015-01-23 20:23:56 UTC - 2.0
- v.2.0.0.pre2 - 2014-12-06 01:55:42 UTC - Adds X-Permitted-Cross-Domain-Policies support by default
- v1.4.0 - 2014-12-06 01:54:48 UTC - Deprecate features in preparation for 2.0
- v2.0.0.pre - 2014-11-14 00:54:07 UTC - 2.0.0.pre - CSP level 2 support
- v1.3.4 - 2014-10-13 22:05:44 UTC -
- v1.3.3 - 2014-08-15 02:30:24 UTC - hsts preload confirmation value support
- v1.3.2 - 2014-08-14 00:01:32 UTC - Add app tagging support
- LICENSE
- README
- tasks.rake
Classes and Modules
- ActionController
- ActionController::Base
- Object
- SecureHeaders
- SecureHeaders::CSP
- SecureHeaders::ClearSiteData
- SecureHeaders::ClearSiteDataConfigError
- SecureHeaders::Configuration
- SecureHeaders::Configuration::AlreadyConfiguredError
- SecureHeaders::Configuration::IllegalPolicyModificationError
- SecureHeaders::Configuration::NotYetConfiguredError
- SecureHeaders::ContentSecurityPolicy
- SecureHeaders::ContentSecurityPolicyConfig
- SecureHeaders::ContentSecurityPolicyConfigError
- SecureHeaders::ContentSecurityPolicyReportOnlyConfig
- SecureHeaders::Cookie
- SecureHeaders::CookiesConfig
- SecureHeaders::CookiesConfigError
- SecureHeaders::DynamicConfig
- SecureHeaders::ExpectCertificateTransparency
- SecureHeaders::ExpectCertificateTransparencyConfigError
- SecureHeaders::HashHelper
- SecureHeaders::Middleware
- SecureHeaders::NoOpHeaderConfig
- SecureHeaders::PolicyManagement
- SecureHeaders::PolicyManagement::ClassMethods
- SecureHeaders::Railtie
- SecureHeaders::ReferrerPolicy
- SecureHeaders::ReferrerPolicyConfigError
- SecureHeaders::STSConfigError
- SecureHeaders::StrictTransportSecurity
- SecureHeaders::ViewHelpers
- SecureHeaders::ViewHelpers::UnexpectedHashedScriptException
- SecureHeaders::XContentTypeOptions
- SecureHeaders::XContentTypeOptionsConfigError
- SecureHeaders::XDOConfigError
- SecureHeaders::XDownloadOptions
- SecureHeaders::XFOConfigError
- SecureHeaders::XFrameOptions
- SecureHeaders::XPCDPConfigError
- SecureHeaders::XPermittedCrossDomainPolicies
- SecureHeaders::XXssProtection
- SecureHeaders::XXssProtectionConfigError
Methods
- ::append_content_security_policy_directives — SecureHeaders
- ::attrs — SecureHeaders::ContentSecurityPolicyConfig
- ::config_and_target — SecureHeaders
- ::config_for — SecureHeaders
- ::configure — SecureHeaders::Configuration
- ::content_security_policy_nonce — SecureHeaders
- ::content_security_policy_script_nonce — SecureHeaders
- ::content_security_policy_style_nonce — SecureHeaders
- ::deep_copy — SecureHeaders::Configuration
- ::deep_copy_if_hash — SecureHeaders::Configuration
- ::default — SecureHeaders::Configuration
- ::default_config — SecureHeaders::Configuration
- ::dup — SecureHeaders::Configuration
- ::guess_target — SecureHeaders
- ::header_hash_for — SecureHeaders
- ::included — SecureHeaders::PolicyManagement
- ::make_header — SecureHeaders::ClearSiteData
- ::make_header — SecureHeaders::ExpectCertificateTransparency
- ::make_header — SecureHeaders::ReferrerPolicy
- ::make_header — SecureHeaders::StrictTransportSecurity
- ::make_header — SecureHeaders::XContentTypeOptions
- ::make_header — SecureHeaders::XDownloadOptions
- ::make_header — SecureHeaders::XFrameOptions
- ::make_header — SecureHeaders::XPermittedCrossDomainPolicies
- ::make_header — SecureHeaders::XXssProtection
- ::make_header_value — SecureHeaders::ClearSiteData
- ::named_append — SecureHeaders::Configuration
- ::named_append_or_override_exists? — SecureHeaders::Configuration
- ::named_appends — SecureHeaders::Configuration
- ::new — SecureHeaders::Configuration
- ::new — SecureHeaders::ContentSecurityPolicy
- ::new — SecureHeaders::ContentSecurityPolicy
- ::new — SecureHeaders::Cookie
- ::new — SecureHeaders::ExpectCertificateTransparency
- ::new — SecureHeaders::Middleware
- ::new — SecureHeaders::CookiesConfig
- ::new — SecureHeaders::DynamicConfig
- ::opt_out_of_all_protection — SecureHeaders
- ::opt_out_of_header — SecureHeaders
- ::override — SecureHeaders::Configuration
- ::override_content_security_policy_directives — SecureHeaders
- ::override_secure_headers_request_config — SecureHeaders
- ::override_x_frame_options — SecureHeaders
- ::overrides — SecureHeaders::Configuration
- ::raise_on_unknown_target — SecureHeaders
- ::use_content_security_policy_named_append — SecureHeaders
- ::use_secure_headers_override — SecureHeaders
- ::validate_config! — SecureHeaders::ClearSiteData
- ::validate_config! — SecureHeaders::Cookie
- ::validate_config! — SecureHeaders::ExpectCertificateTransparency
- ::validate_config! — SecureHeaders::ReferrerPolicy
- ::validate_config! — SecureHeaders::StrictTransportSecurity
- ::validate_config! — SecureHeaders::XContentTypeOptions
- ::validate_config! — SecureHeaders::XDownloadOptions
- ::validate_config! — SecureHeaders::XFrameOptions
- ::validate_config! — SecureHeaders::XPermittedCrossDomainPolicies
- ::validate_config! — SecureHeaders::XXssProtection
- #== — SecureHeaders::DynamicConfig
- #[] — SecureHeaders::NoOpHeaderConfig
- #[] — SecureHeaders::DynamicConfig
- #[]= — SecureHeaders::NoOpHeaderConfig
- #[]= — SecureHeaders::DynamicConfig
- #_content_security_policy_nonce — SecureHeaders::ViewHelpers
- #already_flagged? — SecureHeaders::Cookie
- #append — SecureHeaders::DynamicConfig
- #append_content_security_policy_directives — SecureHeaders
- #append_nonce — SecureHeaders::ContentSecurityPolicy
- #append_nonce — SecureHeaders::ContentSecurityPolicy
- #boolean? — SecureHeaders::PolicyManagement::ClassMethods
- #boom — SecureHeaders::NoOpHeaderConfig
- #build_media_type_list_directive — SecureHeaders::ContentSecurityPolicy
- #build_media_type_list_directive — SecureHeaders::ContentSecurityPolicy
- #build_sandbox_list_directive — SecureHeaders::ContentSecurityPolicy
- #build_sandbox_list_directive — SecureHeaders::ContentSecurityPolicy
- #build_source_list_directive — SecureHeaders::ContentSecurityPolicy
- #build_source_list_directive — SecureHeaders::ContentSecurityPolicy
- #build_value — SecureHeaders::ContentSecurityPolicy
- #build_value — SecureHeaders::ContentSecurityPolicy
- #call — SecureHeaders::Middleware
- #combine_policies — SecureHeaders::PolicyManagement::ClassMethods
- #conditionally_flag? — SecureHeaders::Cookie
- #content_security_policy_nonce — SecureHeaders::ViewHelpers
- #content_security_policy_script_nonce — SecureHeaders
- #content_security_policy_script_nonce — SecureHeaders::ViewHelpers
- #content_security_policy_style_nonce — SecureHeaders
- #content_security_policy_style_nonce — SecureHeaders::ViewHelpers
- #csp= — SecureHeaders::Configuration
- #csp_report_only= — SecureHeaders::Configuration
- #directive_value — SecureHeaders::DynamicConfig
- #directives — SecureHeaders::ContentSecurityPolicy
- #directives — SecureHeaders::ContentSecurityPolicy
- #dup — SecureHeaders::NoOpHeaderConfig
- #dup — SecureHeaders::Configuration
- #dup — SecureHeaders::DynamicConfig
- #enforced_directive — SecureHeaders::ExpectCertificateTransparency
- #ensure_array_of_strings! — SecureHeaders::PolicyManagement::ClassMethods
- #ensure_valid_directive! — SecureHeaders::PolicyManagement::ClassMethods
- #ensure_valid_sources! — SecureHeaders::PolicyManagement::ClassMethods
- #extract_options — SecureHeaders::ViewHelpers
- #flag_cookie? — SecureHeaders::Cookie
- #flag_cookies! — SecureHeaders::Middleware
- #flag_samesite? — SecureHeaders::Cookie
- #flag_samesite_enforcement? — SecureHeaders::Cookie
- #flag_samesite_lax? — SecureHeaders::Cookie
- #flag_samesite_none? — SecureHeaders::Cookie
- #flag_samesite_strict? — SecureHeaders::Cookie
- #from_hash — SecureHeaders::DynamicConfig
- #generate_headers — SecureHeaders::Configuration
- #hash_source — SecureHeaders::HashHelper
- #hashed_javascript_tag — SecureHeaders::ViewHelpers
- #hashed_style_tag — SecureHeaders::ViewHelpers
- #hashed_tag — SecureHeaders::ViewHelpers
- #httponly? — SecureHeaders::Cookie
- #initialize_copy — SecureHeaders::DynamicConfig
- #is_hash? — SecureHeaders::CookiesConfig
- #is_true_or_opt_out? — SecureHeaders::CookiesConfig
- #keep_wildcard_sources — SecureHeaders::ContentSecurityPolicy
- #keep_wildcard_sources — SecureHeaders::ContentSecurityPolicy
- #keys — SecureHeaders::NoOpHeaderConfig
- #list_directive? — SecureHeaders::PolicyManagement::ClassMethods
- #make_header — SecureHeaders::PolicyManagement::ClassMethods
- #make_report_only — SecureHeaders::ContentSecurityPolicyConfig
- #make_report_only — SecureHeaders::ContentSecurityPolicyReportOnlyConfig
- #max_age_directive — SecureHeaders::ExpectCertificateTransparency
- #media_type_list? — SecureHeaders::PolicyManagement::ClassMethods
- #merge — SecureHeaders::DynamicConfig
- #merge! — SecureHeaders::DynamicConfig
- #merge_policy_additions — SecureHeaders::PolicyManagement::ClassMethods
- #minify_source_list — SecureHeaders::ContentSecurityPolicy
- #minify_source_list — SecureHeaders::ContentSecurityPolicy
- #name — SecureHeaders::ContentSecurityPolicy
- #name — SecureHeaders::ContentSecurityPolicy
- #nonced_javascript_include_tag — SecureHeaders::ViewHelpers
- #nonced_javascript_pack_tag — SecureHeaders::ViewHelpers
- #nonced_javascript_tag — SecureHeaders::ViewHelpers
- #nonced_style_tag — SecureHeaders::ViewHelpers
- #nonced_stylesheet_link_tag — SecureHeaders::ViewHelpers
- #nonced_stylesheet_pack_tag — SecureHeaders::ViewHelpers
- #nonced_tag — SecureHeaders::ViewHelpers
- #opt_out — SecureHeaders::Configuration
- #opt_out? — SecureHeaders::NoOpHeaderConfig
- #opt_out? — SecureHeaders::DynamicConfig
- #opt_out_of_header — SecureHeaders
- #override — SecureHeaders::Configuration
- #override_content_security_policy_directives — SecureHeaders
- #override_secure — SecureHeaders::Middleware
- #override_x_frame_options — SecureHeaders
- #parse — SecureHeaders::Cookie
- #parsed_cookie — SecureHeaders::Cookie
- #populate_fetch_source_with_default! — SecureHeaders::PolicyManagement::ClassMethods
- #populate_nonces — SecureHeaders::ContentSecurityPolicy
- #populate_nonces — SecureHeaders::ContentSecurityPolicy
- #reject_all_values_if_none — SecureHeaders::ContentSecurityPolicy
- #reject_all_values_if_none — SecureHeaders::ContentSecurityPolicy
- #report_only? — SecureHeaders::ContentSecurityPolicyConfig
- #report_only? — SecureHeaders::ContentSecurityPolicyReportOnlyConfig
- #report_uri_directive — SecureHeaders::ExpectCertificateTransparency
- #require_sri_for_list? — SecureHeaders::PolicyManagement::ClassMethods
- #require_trusted_types_for_list? — SecureHeaders::PolicyManagement::ClassMethods
- #samesite? — SecureHeaders::Cookie
- #samesite_cookie — SecureHeaders::Cookie
- #sandbox_list? — SecureHeaders::PolicyManagement::ClassMethods
- #scheme — SecureHeaders::Middleware
- #secure? — SecureHeaders::Cookie
- #secure_cookies= — SecureHeaders::Configuration
- #source_list? — SecureHeaders::PolicyManagement::ClassMethods
- #strip_source_schemes — SecureHeaders::ContentSecurityPolicy
- #strip_source_schemes — SecureHeaders::ContentSecurityPolicy
- #symbol_to_hyphen_case — SecureHeaders::ContentSecurityPolicy
- #symbol_to_hyphen_case — SecureHeaders::ContentSecurityPolicy
- #to_h — SecureHeaders::NoOpHeaderConfig
- #to_h — SecureHeaders::DynamicConfig
- #to_s — SecureHeaders::Cookie
- #ua_to_variation — SecureHeaders::PolicyManagement::ClassMethods
- #unexpected_hash_error_message — SecureHeaders::ViewHelpers
- #update_directive — SecureHeaders::DynamicConfig
- #update_x_frame_options — SecureHeaders::Configuration
- #use_content_security_policy_named_append — SecureHeaders
- #use_secure_headers_override — SecureHeaders
- #validate! — SecureHeaders::CookiesConfig
- #validate_config! — SecureHeaders::Configuration
- #validate_config! — SecureHeaders::CookiesConfig
- #validate_config! — SecureHeaders::PolicyManagement::ClassMethods
- #validate_directive! — SecureHeaders::PolicyManagement::ClassMethods
- #validate_exclusive_use_of_hash_constraints! — SecureHeaders::CookiesConfig
- #validate_exclusive_use_of_samesite_enforcement! — SecureHeaders::CookiesConfig
- #validate_hash_or_true_or_opt_out! — SecureHeaders::CookiesConfig
- #validate_httponly_config! — SecureHeaders::CookiesConfig
- #validate_media_type_expression! — SecureHeaders::PolicyManagement::ClassMethods
- #validate_require_sri_source_expression! — SecureHeaders::PolicyManagement::ClassMethods
- #validate_require_trusted_types_for_source_expression! — SecureHeaders::PolicyManagement::ClassMethods
- #validate_samesite_boolean_config! — SecureHeaders::CookiesConfig
- #validate_samesite_config! — SecureHeaders::CookiesConfig
- #validate_samesite_hash_config! — SecureHeaders::CookiesConfig
- #validate_sandbox_expression! — SecureHeaders::PolicyManagement::ClassMethods
- #validate_secure_config! — SecureHeaders::CookiesConfig
- #validate_source_expression! — SecureHeaders::PolicyManagement::ClassMethods
- #value — SecureHeaders::ContentSecurityPolicy
- #value — SecureHeaders::ContentSecurityPolicy
- #value — SecureHeaders::ExpectCertificateTransparency
- #write_attribute — SecureHeaders::DynamicConfig