add padrino example
This commit is contained in:
Родитель
118a66bfe7
Коммит
a4bf153fd1
40
README.md
40
README.md
|
@ -260,6 +260,46 @@ class Donkey < Sinatra::Application
|
||||||
end
|
end
|
||||||
```
|
```
|
||||||
|
|
||||||
|
### Using with Padrino
|
||||||
|
|
||||||
|
You can use SecureHeaders for Padrino applications as well:
|
||||||
|
|
||||||
|
In your `Gemfile`:
|
||||||
|
|
||||||
|
```ruby
|
||||||
|
gem "secure-headers", :require => 'secure_headers'
|
||||||
|
```
|
||||||
|
|
||||||
|
then in your `app.rb` file you can:
|
||||||
|
|
||||||
|
```ruby
|
||||||
|
module Web
|
||||||
|
class App < Padrino::Application
|
||||||
|
include SecureHeaders
|
||||||
|
|
||||||
|
::SecureHeaders::Configuration.configure do |config|
|
||||||
|
config.hsts = {:max_age => 99, :include_subdomains => true}
|
||||||
|
config.x_frame_options = 'DENY'
|
||||||
|
config.x_content_type_options = "nosniff"
|
||||||
|
config.x_xss_protection = {:value => '1', :mode => false}
|
||||||
|
config.csp = {
|
||||||
|
:default_src => "https://* inline eval",
|
||||||
|
# ALWAYS supply a full URL for report URIs
|
||||||
|
:report_uri => 'https://example.com/uri-directive',
|
||||||
|
:img_src => "https://* data:",
|
||||||
|
:frame_src => "https://* http://*.twimg.com http://itunes.apple.com"
|
||||||
|
}
|
||||||
|
end
|
||||||
|
|
||||||
|
get '/' do
|
||||||
|
set_csp_header(request, nil)
|
||||||
|
render 'index'
|
||||||
|
end
|
||||||
|
end
|
||||||
|
end
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
## Authors
|
## Authors
|
||||||
|
|
||||||
* Neil Matatall [@ndm](https://twitter.com/ndm) - primary author.
|
* Neil Matatall [@ndm](https://twitter.com/ndm) - primary author.
|
||||||
|
|
Загрузка…
Ссылка в новой задаче