Index: appengine/monorail/framework/csp_report.py |
diff --git a/appengine/monorail/framework/csp_report.py b/appengine/monorail/framework/csp_report.py |
new file mode 100644 |
index 0000000000000000000000000000000000000000..b4dd0a4e7d0c0a145c0d7554bde8e09074a2ea4e |
--- /dev/null |
+++ b/appengine/monorail/framework/csp_report.py |
@@ -0,0 +1,19 @@ |
+# Copyright 2016 The Chromium Authors. All rights reserved. |
+# Use of this source code is govered by a BSD-style |
+# license that can be found in the LICENSE file or at |
+# https://developers.google.com/open-source/licenses/bsd |
+ |
+"""Servlet for Content Security Policy violation reporting. |
+See http://www.html5rocks.com/en/tutorials/security/content-security-policy/ |
+for more information on how this mechanism works. |
+""" |
+ |
+import webapp2 |
+import logging |
+ |
+ |
+class CSPReportPage(webapp2.RequestHandler): |
+ """CSPReportPage serves CSP violation reports.""" |
+ |
+ def post(self): |
+ logging.error('CSP Violation: %s' % self.request.body) |