| Index: appengine/monorail/framework/csp_report.py
|
| diff --git a/appengine/monorail/framework/csp_report.py b/appengine/monorail/framework/csp_report.py
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..b4dd0a4e7d0c0a145c0d7554bde8e09074a2ea4e
|
| --- /dev/null
|
| +++ b/appengine/monorail/framework/csp_report.py
|
| @@ -0,0 +1,19 @@
|
| +# Copyright 2016 The Chromium Authors. All rights reserved.
|
| +# Use of this source code is govered by a BSD-style
|
| +# license that can be found in the LICENSE file or at
|
| +# https://developers.google.com/open-source/licenses/bsd
|
| +
|
| +"""Servlet for Content Security Policy violation reporting.
|
| +See http://www.html5rocks.com/en/tutorials/security/content-security-policy/
|
| +for more information on how this mechanism works.
|
| +"""
|
| +
|
| +import webapp2
|
| +import logging
|
| +
|
| +
|
| +class CSPReportPage(webapp2.RequestHandler):
|
| + """CSPReportPage serves CSP violation reports."""
|
| +
|
| + def post(self):
|
| + logging.error('CSP Violation: %s' % self.request.body)
|
|
|