protect_from_forgery :with => :exception
before_action :fetch_body
+ around_action :better_errors_allow_inline, :if => proc { Rails.env.development? }
attr_accessor :current_user
helper_method :current_user
end
end
+ def better_errors_allow_inline
+ yield
+ rescue StandardError
+ append_content_security_policy_directives(
+ :script_src => %w['unsafe-inline'],
+ :style_src => %w['unsafe-inline']
+ )
+
+ raise
+ end
+
private
# extract authorisation credentials from headers, returns user = nil if none