app/controllers/concerns/vscode_cdn_csp.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

# rubocop:disable Naming/FileName
# frozen_string_literal: true

module VSCodeCDNCSP
  extend ActiveSupport::Concern

  included do
    content_security_policy do |policy|
      next if policy.directives.blank?

      default_src = Array(policy.directives['default-src'] || [])
      policy.directives['frame-src'] ||= default_src
      policy.directives['frame-src'].concat(['https://*.vscode-cdn.net/'])
    end
  end
end
# rubocop:enable Naming/FileName