Add CSP report-uri to demo reporting

SamuraiWTF · May 13, 2020 · c321e24 · c321e24
1 parent dc703e7
commit c321e24
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/client.csp.demo/app.js b/client.csp.demo/app.js
@@ -26,6 +26,7 @@ global.cspDirectives = { 'default-src': `'self'`, 'use-default-src': 'on' }
 const globalCsp = (req, res, next) => {
   if(global.csp.trim().length > 0) {
     res.set('Content-Security-Policy', global.csp.replace(/\$nonce/g, res.nonce))
+    res.set('Content-Security-Policy-Report-Only', 'report-uri /csp-report; ' + global.csp.replace(/\$nonce/g, res.nonce))
   }
   next()
 }