Inline styles violate the default Content Security Policy generated by Rails. I also made it so that the jobs column is larger on tables with more space.
Rails.application.configure do
config.content_security_policy do |policy|
policy.default_src :self, :https
policy.font_src :self, :https, :data
policy.img_src :self, :https, :data
policy.object_src :none
policy.script_src :self, :https
policy.style_src :self, :https
# Specify URI for violation reports
# policy.report_uri "/csp-violation-report-endpoint"
end
# Generate session nonces for permitted importmap, inline scripts, and inline styles.
config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s }
config.content_security_policy_nonce_directives = %w[script-src style-src]
# Report violations without enforcing the policy.
# config.content_security_policy_report_only = true
end
Inline styles violate the default Content Security Policy generated by Rails. I also made it so that the jobs column is larger on tables with more space.