config/initializers/secureheaders.rb


1
2
3
4
5
6
7
8
9
10

SecureHeaders::Configuration.default do |config|
  config.cookies = {
    secure: true,
    httponly: true,
    samesite: {
      lax: true
    }
  }
  config.csp = SecureHeaders::OPT_OUT
end