config/initializers/policy_headers.rb

   1 # frozen_string_literal: true
   2
   3 module OpenStreetMap
   4   module Rack
   5     class PolicyHeaders
   6       COOP_HEADER = "Cross-Origin-Opener-Policy"
   7
   8       def initialize(app)
   9         @app = app
  10       end
  11
  12       def call(env)
  13         status, headers, response = @app.call(env)
  14         headers[COOP_HEADER] = "same-origin" unless headers.key?(COOP_HEADER)
  15         [status, headers, response]
  16       end
  17     end
  18   end
  19 end
  20
  21 Rails.configuration.middleware.use OpenStreetMap::Rack::PolicyHeaders