debian-mirror-gitlab/app/controllers/projects/tracings_controller.rb
2022-07-29 14:03:07 +02:00

30 lines
666 B
Ruby

# frozen_string_literal: true
module Projects
class TracingsController < Projects::ApplicationController
content_security_policy do |p|
next if p.directives.blank?
global_frame_src = p.frame_src
p.frame_src -> { frame_src_csp_policy(global_frame_src) }
end
before_action :authorize_update_environment!
feature_category :tracing
urgency :low
def show
render_404 unless Feature.enabled?(:monitor_tracing, @project)
end
private
def frame_src_csp_policy(global_frame_src)
external_url = @project&.tracing_setting&.external_url
external_url.presence || global_frame_src
end
end
end