kotovalexarian-likes-github/rails--rails
1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
Code Releases Activity

Add support for prefetch-src directive

Browse source 
Specification: https://w3c.github.io/webappsec-csp/#directive-prefetch-src

This directive can already be used as an experimental feature in Chrome.
Ref: https://bugs.chromium.org/p/chromium/issues/detail?id=801561
This commit is contained in:
yuuji.yaginuma 2018-05-03 11:38:17 +09:00 committed by Yuji Yaginuma
parent 847342c25c
commit 1007191f31
2 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
actionpack/lib/action_dispatch/http/content_security_policy.rb
View file

@ -126,6 +126,7 @@ module ActionDispatch #:nodoc:
manifest_src: "manifest-src",
media_src: "media-src",
object_src: "object-src",
prefetch_src: "prefetch-src",
script_src: "script-src",
style_src: "style-src",
worker_src: "worker-src"

6
actionpack/test/dispatch/content_security_policy_test.rb
View file

@ -116,6 +116,12 @@ class ContentSecurityPolicyTest < ActiveSupport::TestCase
@policy.object_src false
assert_no_match %r{object-src}, @policy.build
@policy.prefetch_src :self
assert_match %r{prefetch-src 'self'}, @policy.build
@policy.prefetch_src false
assert_no_match %r{prefetch-src}, @policy.build
@policy.script_src :self
assert_match %r{script-src 'self'}, @policy.build