30f3ecc6ad
Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com> This commit refactors the entire application to replace the 'parties' concept with 'events'. All controllers, models, views, and related files have been updated to reflect this change. The parties table has been replaced with an events table, and all related functionality has been updated accordingly.
26 lines
1.0 KiB
Ruby
Executable File
26 lines
1.0 KiB
Ruby
Executable File
# Be sure to restart your server when you modify this file.
|
|
|
|
# Define an application-wide content security policy.
|
|
# See the Securing Rails Applications Guide for more information:
|
|
# https://guides.rubyonrails.org/security.html#content-security-policy-header
|
|
|
|
# Rails.application.configure do
|
|
# config.content_security_policy do |policy|
|
|
# policy.default_src :self, :https
|
|
# policy.font_src :self, :https, :data
|
|
# policy.img_src :self, :https, :data
|
|
# policy.object_src :none
|
|
# policy.script_src :self, :https
|
|
# policy.style_src :self, :https
|
|
# # Specify URI for violation reports
|
|
# # policy.report_uri "/csp-violation-report-endpoint"
|
|
# end
|
|
#
|
|
# # Generate session nonces for permitted importmap, inline scripts, and inline styles.
|
|
# config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s }
|
|
# config.content_security_policy_nonce_directives = %w(script-src style-src)
|
|
#
|
|
# # Report violations without enforcing the policy.
|
|
# # config.content_security_policy_report_only = true
|
|
# end
|