Merge pull request #302 from cweider/csp-report-uri

feat(security): add CSP violation reporting
freelawproject · Jul 5, 2023 · dec8889 · dec8889
2 parents d21b923 + 30898f4
commit dec8889
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.env.example b/.env.example
@@ -41,6 +41,7 @@ RQ_RETRY_INTERVAL=20
 # sentry.py
 SENTRY_DSN=""
 SENTRY_SAMPLE_TRACE=1.0
+SENTRY_REPORT_URI=""
 
 # twitter.py
 TWITTER_CONSUMER_KEY=""

diff --git a/bc/settings/project/security.py b/bc/settings/project/security.py
@@ -4,6 +4,7 @@
 
 from ..django import DEVELOPMENT, INSTALLED_APPS
 from ..third_party.aws import AWS_S3_CUSTOM_DOMAIN
+from ..third_party.sentry import SENTRY_REPORT_URI
 
 env = environ.FileAwareEnv()
 
@@ -30,6 +31,9 @@
     AWS_S3_CUSTOM_DOMAIN,
     "https://newassets.hcaptcha.com/",
 )
+if SENTRY_REPORT_URI:
+    CSP_REPORT_URI = SENTRY_REPORT_URI
+
 
 RATELIMIT_VIEW = "bc.web.views.ratelimited"
 

diff --git a/bc/settings/third_party/sentry.py b/bc/settings/third_party/sentry.py
@@ -7,6 +7,7 @@
 env = environ.FileAwareEnv()
 SENTRY_DSN = env("SENTRY_DSN", default="")
 SENTRY_SAMPLE_TRACE = env("SENTRY_SAMPLE_TRACE", default=1.0)
+SENTRY_REPORT_URI = env("SENTRY_REPORT_URI", default="")
 
 
 if SENTRY_DSN: