/Ruby on Rails 5.2

module ActionView::Helpers::CspHelper

Public Instance Methods

csp_meta_tag() Show source
# File actionview/lib/action_view/helpers/csp_helper.rb, line 17
def csp_meta_tag
  if content_security_policy?
    tag("meta", name: "csp-nonce", content: content_security_policy_nonce)

Returns a meta tag “csp-nonce” with the per-session nonce value for allowing inline <script> tags.

  <%= csp_meta_tag %>

This is used by the Rails UJS helper to create dynamically loaded inline <script> elements.

© 2004–2018 David Heinemeier Hansson
Licensed under the MIT License.