aboutsummaryrefslogtreecommitdiffstats
path: root/app/controllers/application_controller.rb
diff options
context:
space:
mode:
authorLouise Crow <louise.crow@gmail.com>2014-11-18 16:18:31 +0000
committerLouise Crow <louise.crow@gmail.com>2014-12-05 15:57:18 +0000
commit72fcd18521d4b65b391310e758d5f8a2cb677950 (patch)
treef83504c0c0013c0d54d50cf0ad78ae09243d5269 /app/controllers/application_controller.rb
parent7a7899bf8ad3e89f59b956ef74d1d44271396328 (diff)
Add secureheaders
Issue some security-related headers by default.
Diffstat (limited to 'app/controllers/application_controller.rb')
-rw-r--r--app/controllers/application_controller.rb3
1 files changed, 3 insertions, 0 deletions
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 4d3f40d40..1ccf7e5db 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -17,6 +17,9 @@ class ApplicationController < ActionController::Base
# assign our own handler method for non-local exceptions
rescue_from Exception, :with => :render_exception
+ # Add some security-related headers (see config/initializers/secure_headers.rb)
+ ensure_security_headers
+
# Standard headers, footers and navigation for whole site
layout "default"
include FastGettext::Translation # make functions like _, n_, N_ etc available)