Cannot use the `append_content_security_policy_directives` method in `ApplicationController`

[pvcresin]

The append_content_security_policy_directives from SecureHeaders can be referenced in ApplicationController as follows:

class ApplicationController < ActionController::Base
  def foo
    append_content_security_policy_directives(xxxx)
  end
end

However, Sorbet seems unable to find append_content_security_policy_directives.

Method append_content_security_policy_directives does not exist on ApplicationController

By the way, the method is generated in RBI as follows:

# sorbet/rbi/gems/secure_headers@7.1.0.rbi
module SecureHeaders
  def append_content_security_policy_directives(additions); end
  # ...
end

Therefore, it's possible that ActionController and SecureHeaders are not linked correctly.

[KaanOzkan]

Looks like SecureHeaders is mixed in using ActiveSupport.on_load here. DynamicMixin compiler doesn't see this include and therefore doesn't reflect the dynamic mixin in the RBI.

Instead, you can define a shim in sorbet/rbi/shims/secure_headers.rbi that contains something like this to resolve the error:

class ActionController::Base
  include SecureHeaders
end

Further investigation is needed to see exactly why the DynamicMixin compiler isn't picking this up.

[pvcresin]

Thank you for the details. As you said, I'm addressing this by placing the exact same RBI in sorbet/rbi/shims/secure_headers.rbi.