Add CSRF and CSP meta tags to frame responses

See hotwired/turbo-rails#669
katalyst · Nov 6, 2024 · d69f67d · d69f67d
1 parent 32046e8
commit d69f67d
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    katalyst-kpop (3.2.2)
+    katalyst-kpop (3.2.3)
       katalyst-html-attributes
       turbo-rails
       view_component

diff --git a/app/views/layouts/kpop/frame.html.erb b/app/views/layouts/kpop/frame.html.erb
@@ -1,5 +1,9 @@
 <html>
 <head>
+  <%# Workaround for https://github.com/hotwired/turbo-rails/issues/669 %>
+  <%= csrf_meta_tags %>
+  <%= csp_meta_tag %>
+
   <%# include all turbo-track elements so turbo knows it can cache frame visits %>
   <%= stylesheet_link_tag "application", "data-turbo-track": "reload" %>
   <%= javascript_importmap_tags %>

diff --git a/katalyst-kpop.gemspec b/katalyst-kpop.gemspec
@@ -2,7 +2,7 @@
 
 Gem::Specification.new do |spec|
   spec.name    = "katalyst-kpop"
-  spec.version = "3.2.2"
+  spec.version = "3.2.3"
   spec.authors = ["Katalyst Interactive"]
   spec.email   = ["[email protected]"]