coalescing_panda 5.0.1 → 5.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 4946cde6027861484869379aa63fb8c0016d413d
-  data.tar.gz: 40794a3d7beab2e690e38da0d0433b0195ab2c60
+SHA256:
+  metadata.gz: 671ec79eae7cb32383d46dd2fd788864463b8e3258a501e0cd16d6b98eb8b384
+  data.tar.gz: 6d7d5176bbba7a011279924cb17b3cc953d73bcf1fc516bdaf39df6b7db03f23
 SHA512:
-  metadata.gz: 0672ab922b73f33f81534f586e918f8c82dec08c14f30e56d1f97d62c0597416529f8f96baab489bf3d9c6c7a114563ff513ae3fa7afd47a15f9faddac2e5695
-  data.tar.gz: 99afede25863235a5db2dfaf59e2ef7d64bf7361243fead2ddb5dce5e0b01db9b73c74c039e65c01afd21956caf0f07abda7ac106ecf9a37b8e782c7113d1667
+  metadata.gz: 2bd75383b5aa806226be52acebd1efa38b02103bf38d71784c4c7933f47dbbdf6e3dc919155e99783a08b760ab3a53caa51ef38213e9eaa8daf6d158778c181a
+  data.tar.gz: 425b73b527dd3598d1afbec15e9e67a306209d337f4cb944bf34dfa075b4f080f6c2d6306566b4764b8c5a87f0a262389d306c8d418a6dba802ea09f067428d0

data/app/assets/config/coalescing_panda/manifest.js

@@ -0,0 +1,3 @@
+//= link_tree ../../images
+//= link_directory ../../javascripts/coalescing_panda/ .js
+//= link_directory ../../stylesheets/coalescing_panda/ .css

data/app/controllers/coalescing_panda/canvas_batches_controller.rb

@@ -12,13 +12,13 @@ module CoalescingPanda
       @batch.status = 'Queued'
       @batch.save
       worker = CoalescingPanda::Workers::CourseMiner.new(@batch.context, @batch.options)
-      session[:canvas_batch_id] = worker.batch.id
+      current_session_data[:canvas_batch_id] = worker.batch.id
       worker.start(true)
       redirect_to :back
     end
 
     def clear_batch_session
-      session[:canvas_batch_id] = nil
+      current_session_data[:canvas_batch_id] = nil
       render nothing: true
     end
   end

data/app/controllers/coalescing_panda/lti_controller.rb

@@ -17,7 +17,7 @@ module CoalescingPanda
       lti_nav[:account][:text] = params[:account_navigation_label] if params[:account_navigation_label].present?
       platform = 'canvas.instructure.com'
       host = "#{request.scheme}://#{request.host_with_port}"
-      tc = IMS::LTI::Services::ToolConfig.new(:title => lti_options[:title], :launch_url => ("#{host}#{lti_options[:launch_route]}") || 'ABC')
+      tc = IMS::LTI::ToolConfig.new(:title => lti_options[:title], :launch_url => ("#{host}#{lti_options[:launch_route]}") || 'ABC')
       tc.set_ext_param(platform, :domain, request.host)
       tc.set_ext_param(platform, :privacy_level, 'public')
       tc.set_custom_param(:custom_canvas_role, '$Canvas.membership.roles')

data/app/helpers/coalescing_panda/canvas_batches_helper.rb

@@ -1,7 +1,7 @@
 module CoalescingPanda
   module CanvasBatchesHelper
     def current_batch
-      @current_batch ||= CoalescingPanda::CanvasBatch.find_by_id(session[:canvas_batch_id])
+      @current_batch ||= CoalescingPanda::CanvasBatch.find_by_id(current_session_data[:canvas_batch_id])
     end
   end
 end

data/app/models/coalescing_panda/json_with_indifferent_access.rb

@@ -0,0 +1,13 @@
+module CoalescingPanda
+  class JSONWithIndifferentAccess
+    def self.load(str)
+      return nil unless str.present?
+      parsed = JSON.parse(str)
+      parsed.is_a?(Hash) ? HashWithIndifferentAccess.new(parsed) : parsed
+    end
+
+    def self.dump(obj)
+      JSON.dump(obj)
+    end
+  end
+end

data/app/models/coalescing_panda/persistent_session.rb

@@ -1,10 +1,11 @@
 module CoalescingPanda
   class PersistentSession < ActiveRecord::Base
-    serialize :data, Hash
+    serialize :data, JSONWithIndifferentAccess
     belongs_to :coalescing_panda_lti_account, :class_name => 'CoalescingPanda::LtiAccount'
     validates :coalescing_panda_lti_account_id, presence: true
 
     after_initialize do
+      self.data ||= {}
       self.session_key ||= SecureRandom.urlsafe_base64(60)
     end
 

data/db/migrate/20131114150001_create_coalescing_panda_canvas_api_auths.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaCanvasApiAuths < ActiveRecord::Migration
+class CreateCoalescingPandaCanvasApiAuths < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_canvas_api_auths do |t|
       t.string :user_id

data/db/migrate/20131118211442_create_coalescing_panda_lti_accounts.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaLtiAccounts < ActiveRecord::Migration
+class CreateCoalescingPandaLtiAccounts < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_lti_accounts do |t|
       t.string :name

data/db/migrate/20131119165343_create_coalescing_panda_lti_nonces.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaLtiNonces < ActiveRecord::Migration
+class CreateCoalescingPandaLtiNonces < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_lti_nonces do |t|
       t.belongs_to :coalescing_panda_lti_account

data/db/migrate/20140904223159_create_coalescing_panda_sessions.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaSessions < ActiveRecord::Migration
+class CreateCoalescingPandaSessions < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_sessions do |t|
       t.string :token

data/db/migrate/20141119225319_create_coalescing_panda_terms.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaTerms < ActiveRecord::Migration
+class CreateCoalescingPandaTerms < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_terms do |t|
       t.belongs_to :coalescing_panda_lti_account, null: false

data/db/migrate/20141119225721_create_coalescing_panda_courses.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaCourses < ActiveRecord::Migration
+class CreateCoalescingPandaCourses < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_courses do |t|
       t.belongs_to :coalescing_panda_lti_account, null: false

data/db/migrate/20141120151432_create_coalescing_panda_sections.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaSections < ActiveRecord::Migration
+class CreateCoalescingPandaSections < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_sections do |t|
       t.belongs_to :coalescing_panda_course, null: false

data/db/migrate/20141120151940_create_coalescing_panda_assignments.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaAssignments < ActiveRecord::Migration
+class CreateCoalescingPandaAssignments < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_assignments do |t|
       t.belongs_to :coalescing_panda_course, null: false

data/db/migrate/20141120152458_create_coalescing_panda_users.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaUsers < ActiveRecord::Migration
+class CreateCoalescingPandaUsers < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_users do |t|
       t.belongs_to :coalescing_panda_lti_account, null: false

data/db/migrate/20141120152546_create_coalescing_panda_submissions.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaSubmissions < ActiveRecord::Migration
+class CreateCoalescingPandaSubmissions < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_submissions do |t|
       t.belongs_to :coalescing_panda_user, null: false

data/db/migrate/20141120153135_create_coalescing_panda_enrollments.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaEnrollments < ActiveRecord::Migration
+class CreateCoalescingPandaEnrollments < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_enrollments do |t|
       t.belongs_to :coalescing_panda_user, null: false

data/db/migrate/20141121174846_create_coalescing_panda_canvas_batches.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaCanvasBatches < ActiveRecord::Migration
+class CreateCoalescingPandaCanvasBatches < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_canvas_batches do |t|
       t.float :percent_complete, default: 0.0

data/db/migrate/20141124160857_create_delayed_jobs.rb

@@ -1,4 +1,4 @@
-class CreateDelayedJobs < ActiveRecord::Migration
+class CreateDelayedJobs < CoalescingPanda::MiscHelper::MigrationClass
   def self.up
     create_table :delayed_jobs, :force => true do |table|
       table.integer :priority, :default => 0, :null => false # Allows some jobs to jump to the front of the queue

data/db/migrate/20141208221740_add_submission_types_to_assignments.rb

@@ -1,4 +1,4 @@
-class AddSubmissionTypesToAssignments < ActiveRecord::Migration
+class AddSubmissionTypesToAssignments < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_assignments, :submission_types, :text
   end

data/db/migrate/20150106175418_add_group_category_id_to_assignment.rb

@@ -1,4 +1,4 @@
-class AddGroupCategoryIdToAssignment < ActiveRecord::Migration
+class AddGroupCategoryIdToAssignment < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_assignments, :group_category_id, :integer
     add_column :coalescing_panda_assignments, :grade_group_students_individually, :boolean

data/db/migrate/20150106180131_add_published_to_assignments.rb

@@ -1,4 +1,4 @@
-class AddPublishedToAssignments < ActiveRecord::Migration
+class AddPublishedToAssignments < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_assignments, :published, :boolean
   end

data/db/migrate/20150107205405_create_coalescing_panda_groups.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaGroups < ActiveRecord::Migration
+class CreateCoalescingPandaGroups < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_groups do |t|
       t.belongs_to :context, polymorphic: true

data/db/migrate/20150107205413_create_coalescing_panda_group_memberships.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaGroupMemberships < ActiveRecord::Migration
+class CreateCoalescingPandaGroupMemberships < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_group_memberships do |t|
       t.belongs_to :coalescing_panda_group

data/db/migrate/20150210180516_add_context_to_canvas_batch.rb

@@ -1,4 +1,4 @@
-class AddContextToCanvasBatch < ActiveRecord::Migration
+class AddContextToCanvasBatch < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_canvas_batches, :context_id, :integer
     add_column :coalescing_panda_canvas_batches, :context_type, :string

data/db/migrate/20150506183335_create_coalescing_panda_assignment_groups.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaAssignmentGroups < ActiveRecord::Migration
+class CreateCoalescingPandaAssignmentGroups < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_assignment_groups do |t|
       t.belongs_to :coalescing_panda_course, null: false

data/db/migrate/20150506192717_add_assignment_group_id_to_assignments.rb

@@ -1,4 +1,4 @@
-class AddAssignmentGroupIdToAssignments < ActiveRecord::Migration
+class AddAssignmentGroupIdToAssignments < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_assignments, :coalescing_panda_assignment_group_id, :integer
   end

data/db/migrate/20150526144713_add_account_to_canvas_batches.rb

@@ -1,4 +1,4 @@
-class AddAccountToCanvasBatches < ActiveRecord::Migration
+class AddAccountToCanvasBatches < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_canvas_batches, :coalescing_panda_lti_account_id, :integer, index: true
   end

data/db/migrate/20150602205257_add_option_to_canvas_batches.rb

@@ -1,4 +1,4 @@
-class AddOptionToCanvasBatches < ActiveRecord::Migration
+class AddOptionToCanvasBatches < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_canvas_batches, :options, :text
   end

data/db/migrate/20150708192717_add_group_moderator_to_group_memberships.rb

@@ -1,4 +1,4 @@
-class AddGroupModeratorToGroupMemberships < ActiveRecord::Migration
+class AddGroupModeratorToGroupMemberships < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_group_memberships, :moderator, :boolean
   end

data/db/migrate/20150709192717_add_leader_id_to_groups.rb

@@ -1,4 +1,4 @@
-class AddLeaderIdToGroups < ActiveRecord::Migration
+class AddLeaderIdToGroups < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_groups, :leader_id, :integer
     add_foreign_key :coalescing_panda_groups, :coalescing_panda_users, column: :leader_id, primary_key: "id"

data/db/migrate/20150714205405_create_coalescing_panda_group_categories.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaGroupCategories < ActiveRecord::Migration
+class CreateCoalescingPandaGroupCategories < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_group_categories do |t|
       t.belongs_to :context, polymorphic: true

data/db/migrate/20150811140030_add_fields_to_users.rb

@@ -1,4 +1,4 @@
-class AddFieldsToUsers < ActiveRecord::Migration
+class AddFieldsToUsers < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_users, :login_id, :string
   end

data/db/migrate/20151209155923_add_refresh_settings_to_canvas_api_auth.rb

@@ -1,4 +1,4 @@
-class AddRefreshSettingsToCanvasApiAuth < ActiveRecord::Migration
+class AddRefreshSettingsToCanvasApiAuth < CoalescingPanda::MiscHelper::MigrationClass
   def change
     add_column :coalescing_panda_canvas_api_auths, :refresh_token, :string
     add_column :coalescing_panda_canvas_api_auths, :expires_at, :datetime

data/db/migrate/20160830183155_create_coalescing_panda_oauth_states.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaOauthStates < ActiveRecord::Migration
+class CreateCoalescingPandaOauthStates < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_oauth_states do |t|
       t.string :state_key

data/db/migrate/20200528224505_create_coalescing_panda_persistent_session.rb

@@ -1,4 +1,4 @@
-class CreateCoalescingPandaPersistentSession < ActiveRecord::Migration
+class CreateCoalescingPandaPersistentSession < CoalescingPanda::MiscHelper::MigrationClass
   def change
     create_table :coalescing_panda_persistent_sessions do |t|
       t.string :session_key

data/lib/coalescing_panda/controller_helpers.rb

@@ -2,15 +2,32 @@ require 'browser'
 
 module CoalescingPanda
   module ControllerHelpers
+    extend ActiveSupport::Concern
+
+    included do
+      alias_method :rails_session, :session
+
+      helper_method :encrypted_session_key, :current_session_data, :current_session
+      append_after_action :save_session, if: -> { @current_session && session_changed? }
+    end
+
+    class_methods do
+      def use_native_sessions
+        after_action do
+          rails_session['persistent_session_key'] = current_session.session_key if @current_session.present?
+        end
+      end
+    end
+
     def current_session
-      @current_session ||= CoalescingPanda::PersistentSession.find_by(session_key: session_key) if session_key
-      @current_session ||= CoalescingPanda::PersistentSession.create_from_launch(params, current_lti_account.id)
+      @current_session ||= (CoalescingPanda::PersistentSession.find_by(session_key: session_key) if session_key)
+      @current_session ||= (CoalescingPanda::PersistentSession.create_from_launch(params, current_lti_account.id) if current_lti_account.present?)
       @current_session
     end
 
     def current_lti_account
-      @account ||= CoalescingPanda::LtiAccount.find_by!(key: organization_key) if organization_key
-      @account ||= CoalescingPanda::LtiAccount.find_by(id: organization_id) if organization_id
+      @account ||= (CoalescingPanda::LtiAccount.find_by!(key: organization_key) if organization_key)
+      @account ||= (CoalescingPanda::LtiAccount.find_by(id: organization_id) if organization_id)
       @account
     end
 
@@ -83,42 +100,42 @@ module CoalescingPanda
     end
 
     def check_refresh_token
-      return unless session['uri'] && session['user_id'] && session['oauth_consumer_key']
-      uri = BearcatUri.new(session['uri'])
-      api_auth = CanvasApiAuth.find_by(user_id: session['user_id'], api_domain: uri.api_domain)
-      @lti_account = LtiAccount.find_by(key: session['oauth_consumer_key'])
+      return unless current_session_data['uri'] && current_session_data['user_id'] && current_session_data['oauth_consumer_key']
+      uri = BearcatUri.new(current_session_data['uri'])
+      api_auth = CanvasApiAuth.find_by(user_id: current_session_data['user_id'], api_domain: uri.api_domain)
+      @lti_account = LtiAccount.find_by(key: current_session_data['oauth_consumer_key'])
       return if @lti_account.nil? || api_auth.nil? # Not all tools use oauth
 
       refresh_token(uri, api_auth) if api_auth.expired?
     rescue Footrest::HttpError::BadRequest
-      render_oauth2_page uri, session['user_id']
+      render_oauth2_page uri, current_session_data['user_id']
     end
 
     def set_session(launch_presentation_return_url)
-      session['user_id'] = params['user_id']
-      session['uri'] = launch_presentation_return_url
-      session['lis_person_sourcedid'] = params['lis_person_sourcedid']
-      session['oauth_consumer_key'] = params['oauth_consumer_key']
-      session['custom_canvas_account_id'] = params['custom_canvas_account_id']
+      current_session_data['user_id'] = params['user_id']
+      current_session_data['uri'] = launch_presentation_return_url
+      current_session_data['lis_person_sourcedid'] = params['lis_person_sourcedid']
+      current_session_data['oauth_consumer_key'] = params['oauth_consumer_key']
+      current_session_data['custom_canvas_account_id'] = params['custom_canvas_account_id']
     end
 
     def have_session?
-      if params['tool_consumer_instance_guid'] && session['user_id'] != params['user_id']
+      if params['tool_consumer_instance_guid'] && current_session_data['user_id'] != params['user_id']
         reset_session
         logger.info("resetting session params")
-        session['user_id'] = params['user_id']
+        current_session_data['user_id'] = params['user_id']
       end
 
-      if (session['user_id'] && session['uri'])
-        uri = BearcatUri.new(session['uri'])
-        api_auth = CanvasApiAuth.find_by('user_id = ? and api_domain = ?', session['user_id'], uri.api_domain)
+      if (current_session_data['user_id'] && current_session_data['uri'])
+        uri = BearcatUri.new(current_session_data['uri'])
+        api_auth = CanvasApiAuth.find_by('user_id = ? and api_domain = ?', current_session_data['user_id'], uri.api_domain)
         if api_auth && !api_auth.expired?
           @client = Bearcat::Client.new(token: api_auth.api_token, prefix: uri.prefix)
           @client.user_profile 'self'
         end
       end
 
-      @lti_account = LtiAccount.find_by_key(session['oauth_consumer_key']) if session['oauth_consumer_key']
+      @lti_account = LtiAccount.find_by_key(current_session_data['oauth_consumer_key']) if current_session_data['oauth_consumer_key']
 
       !!@client
     rescue Footrest::HttpError::Unauthorized
@@ -129,8 +146,8 @@ module CoalescingPanda
       authorized = false
       if (@lti_account = params['oauth_consumer_key'] && LtiAccount.find_by_key(params['oauth_consumer_key']))
         sanitized_params = sanitize_params
-        authenticator = IMS::LTI::Services::MessageAuthenticator.new(request.original_url, sanitized_params, @lti_account.secret)
-        authorized = authenticator.valid_signature?
+        @tp = IMS::LTI::ToolProvider.new(@lti_account.key, @lti_account.secret, sanitized_params)
+        authorized = @tp.valid_request?(request)
       end
       logger.info 'not authorized on tp valid request' unless authorized
       authorized = authorized && (roles.count == 0 || (roles & lti_roles).count > 0)
@@ -198,7 +215,7 @@ module CoalescingPanda
       if params[:encrypted_session_key]
         return msg_encryptor.decrypt_and_verify(params[:encrypted_session_key])
       end
-      params[:session_key] || session_key_header
+      params[:session_key] || session_key_header || rails_session['persistent_session_key']
     end
 
     def session_key_header

data/lib/coalescing_panda/engine.rb

@@ -1,4 +1,5 @@
 require 'secure_headers'
+require_relative './secure_headers'
 
 module CoalescingPanda
   class Engine < ::Rails::Engine
@@ -25,6 +26,10 @@ module CoalescingPanda
       end
     end
 
+    initializer 'coalescing_panda.assets' do |app|
+      app.config.assets.precompile << 'coalescing_panda/manifest.js'
+    end
+
     initializer 'cloaescing_panda.route_helper' do |route|
       ActionDispatch::Routing::Mapper.send :include, CoalescingPanda::RouteHelpers
     end
@@ -38,56 +43,21 @@ module CoalescingPanda
     end
 
     initializer :secure_headers do |app|
-      connect_src = %w('self')
-      script_src = %w('self')
-
-      if Rails.env.development?
-        # Allow webpack-dev-server to work
-        connect_src << "http://localhost:3035"
-        connect_src << "ws://localhost:3035"
-
-        # Allow stuff like rack-mini-profiler to work in development:
-        # https://github.com/MiniProfiler/rack-mini-profiler/issues/327
-        # DON'T ENABLE THIS FOR PRODUCTION!
-        script_src << "'unsafe-eval'"
-      elsif CoalescingPanda.lti_options.has_key?(:allow_unsafe_eval) && CoalescingPanda.lti_options[:allow_unsafe_eval] == true
-        # For when code is returned from server and injected into dom.  Need to have unsafe-eval or it won't work.
-        script_src << "'unsafe-eval'"
-      end
-
-      SecureHeaders::Configuration.default do |config|
-        # The default cookie headers aren't compatible with PandaPal cookies currently
-        config.cookies = { samesite: { none: true } }
-
-        if Rails.env.production?
-          config.cookies[:secure] = true
+      begin
+        ::SecureHeaders::Configuration.default do |config|
+          CoalescingPanda::SecureHeaders.apply_defaults(config)
         end
-
-        # Need to allow LTI iframes
-        config.x_frame_options = "ALLOWALL"
-
-        config.x_content_type_options = "nosniff"
-        config.x_xss_protection = "1; mode=block"
-        config.referrer_policy = %w(origin-when-cross-origin strict-origin-when-cross-origin)
-
-        config.csp = {
-            default_src: %w('self'),
-            script_src: script_src,
-            # Certain CSS-in-JS libraries inline the CSS, so we need to use unsafe-inline for them
-            style_src: %w('self' 'unsafe-inline' blob: https://fonts.googleapis.com),
-            font_src: %w('self' data: https://fonts.gstatic.com),
-            connect_src: connect_src,
-        }
+      rescue ::SecureHeaders::Configuration::AlreadyConfiguredError
+        # The App already applied settings
       end
 
-      SecureHeaders::Configuration.override(:safari_override) do |config|
+      ::SecureHeaders::Configuration.override(:safari_override) do |config|
         config.cookies = SecureHeaders::OPT_OUT
       end
 
-      SecureHeaders::Configuration.override(:allow_inline_scripts) do |config|
+      ::SecureHeaders::Configuration.override(:allow_inline_scripts) do |config|
         config.csp[:script_src] << "'unsafe-inline'"
       end
     end
-
   end
 end