module ActionView::Helpers::CspHelper
Public Instance Methods
csp_meta_tag()
click to toggle source
Returns a meta tag “csp-nonce” with the per-session nonce value for allowing inline <script> tags.
<head> <%= csp_meta_tag %> </head>
This is used by the Rails UJS helper to create dynamically loaded inline <script> elements.
# File lib/action_view/helpers/csp_helper.rb, line 16 def csp_meta_tag if content_security_policy? tag("meta", name: "csp-nonce", content: content_security_policy_nonce) end end