Class: ActionDispatch::PermissionsPolicy::Middleware
Relationships & Source Files | |
Inherits: | Object |
Defined in: | actionpack/lib/action_dispatch/http/permissions_policy.rb |
Constant Summary
-
CONTENT_TYPE =
# File 'actionpack/lib/action_dispatch/http/permissions_policy.rb', line 8"Content-Type"
-
POLICY =
The Feature-Policy header has been renamed to Permissions-Policy. The Permissions-Policy requires a different implementation and isn’t yet supported by all browsers. To avoid having to rename this middleware in the future we use the new name for the middleware but keep the old header name and implementation for now.
"Feature-Policy"
Class Method Summary
- .new(app) ⇒ Middleware constructor
Instance Method Summary
Constructor Details
.new(app) ⇒ Middleware
# File 'actionpack/lib/action_dispatch/http/permissions_policy.rb', line 16
def initialize(app) @app = app end
Instance Method Details
#call(env)
[ GitHub ]# File 'actionpack/lib/action_dispatch/http/permissions_policy.rb', line 20
def call(env) request = ActionDispatch::Request.new(env) _, headers, _ = response = @app.call(env) return response if policy_present?(headers) if policy = request. headers[POLICY] = policy.build(request.controller_instance) end if policy_empty?(policy) headers.delete(POLICY) end response end