I am seeing the following in my Rails production log, using v2.13.3

Rollbar.js could not be added because undefined method `current_csp' for #<SecureHeaders::Configuration:0x000000051576d8> exception

This is after upgrading secure_headers from v3.4.1 to v3.5.0 --- the current_csp method has been removed. Overall, I can't help feeling that the secure_headers integration in the Rollbar gem is just trying to be a little too clever. I would much prefer to see a configuration option to disable the use of script nonces, rather than the current attempt to "do the right thing" with respect to the prevailing CSP.