module ActionController::ContentSecurityPolicy::ClassMethods

def content_security_policy(enabled = true, **options, &block)
  before_action(options) do
    if block_given?
      policy = current_content_security_policy
      yield policy
      request.content_security_policy = policy
    end
    unless enabled
      request.content_security_policy = nil
    end
  end
end

def content_security_policy_report_only(report_only = true, **options)
  before_action(options) do
    request.content_security_policy_report_only = report_only
  end
end