method

csp_meta_tag

v7.1.3.4 - Show latest stable - Class: ActionView::Helpers::CspHelper

csp_meta_tag(**options)

public

Returns a meta tag “csp-nonce” with the per-session nonce value for allowing inline <script> tags.

<head>
  <%= csp_meta_tag %>
</head>

This is used by the Rails UJS helper to create dynamically loaded inline <script> elements.

# File actionview/lib/action_view/helpers/csp_helper.rb, line 17
      def csp_meta_tag(**options)
        if content_security_policy?
          options[:name] = "csp-nonce"
          options[:content] = content_security_policy_nonce
          tag("meta", options)
        end
      end

csp_meta_tag

Related methods