Registry / web-framework / secure-headers

secure-headers

library7.3.0rbrubygemsunverified

Secure Headers adds easily configured security headers to HTTP responses, including Content-Security-Policy, X-Frame-Options, and Strict-Transport-Security.

web-framework

gem install secure_headers

github ↗homepage ↗docs ↗

INSTALL

IMPORT

SIG · SECURE-HEADERS

secure-headers

web-frameworkrubyv7.3.0

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

SecureHeaders

✓ require 'secure_headers'

Configure and apply security headers in a Rack application.

require 'secure_headers' SecureHeaders::Configuration.default do |config| config.csp = { default_src: "'self'" } end # In a Rack app: use SecureHeaders::Middleware

Debug

Known issues

gotchaMisconfigured CSP can block legitimate resources; test thoroughly.

fix

Use report-only mode initially: config.csp_report_only = { ... }

affects: >= 0

Upgrade

Version history

7.3.0latest on RubyGems

Audit

Dependencies

No dependency data recorded yet.

Agent activity

6 hits · last 30 days

node

Amazon

Resources

githubhttps://github.com/github/secure_headers ↗

homepagehttps://github.com/github/secure_headers ↗

docshttp://www.rubydoc.info/gems/secure_headers/ ↗