blob: 25dd30c53f2caab1394367c2687222aaa97cb20f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
# frozen_string_literal: true
SecureHeaders::Configuration.default do |config|
config.cookies = {
httponly: true,
samesite: { lax: true },
secure: true
}
config.referrer_policy = 'strict-origin-when-cross-origin'
config.x_content_type_options = 'nosniff'
config.x_download_options = 'noopen'
config.x_frame_options = 'SAMEORIGIN'
config.x_permitted_cross_domain_policies = 'none'
config.x_xss_protection = '1; mode=block'
config.csp = SecureHeaders::OPT_OUT
end
|
