You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Confirm feature parity with secure_headers <=> rails vanilla #394
A discussion in #275 was about ensuring that rails gets support for feature policy and how it would require an API similar to the CSP API. It made me think we should evaluate current features and open issues to see what we'd also like to see in rails.
Compile a list
Review it
open PRs/issues
🍨
I'd like to deprecate and/or transfer ownership of this library eventually 😄
It looks like Rails has most of them by default now that CSP has landed however I think the ability to override these on a per controller basis is missing (CSP is overridable via the global method).
Note to self: I have a harness that makes the transition easier. It includes some ideas around improving the rails API. GitHub was able to (potentially) make the move with one shim and a couple helpers.
Activity
jacobbednarz commentedon Jul 19, 2018
It looks like Rails has most of them by default now that CSP has landed however I think the ability to override these on a per controller basis is missing (CSP is overridable via the global method).
oreoshake commentedon May 6, 2021
Note to self: I have a harness that makes the transition easier. It includes some ideas around improving the rails API. GitHub was able to (potentially) make the move with one shim and a couple helpers.
albritejosey7-afk commentedon Oct 21, 2026
8