https://github.com/teppeis/csp-report

Content Security Policy report viewer
https://github.com/teppeis/csp-report

Last synced: 11 days ago
JSON representation

Content Security Policy report viewer

• Host: GitHub
• URL: https://github.com/teppeis/csp-report
• Owner: teppeis
• Created: 2014-10-22T12:24:49.000Z (about 10 years ago)
• Default Branch: master
• Last Pushed: 2017-06-15T20:43:42.000Z (over 7 years ago)
• Last Synced: 2024-12-08T20:51:26.999Z (15 days ago)
• Language: JavaScript
• Homepage: https://csp-nonce-demo.herokuapp.com/
• Size: 79.1 KB
• Stars: 5
• Watchers: 2
• Forks: 0
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
csp-report

====

## Usage

```bash

$ npm install

$ npm start

```

Specify `http://localhost:3001/report` as `report-uri` of CSP header.  

ex): `Content-Security-Policy: script-src 'self'; report-uri http://localhost:3001/report`

Open `http://localhost:3001` (CSP Reporter) in your browser.  

When CSP violation is reported, it is dynamically displayed with websocket.

![screen](./misc/screen.png)

## Violation Demo

`http://localhost:3001/csp-demo` is a CSP violation demo page.

If you open it in a CSP-supported browser, it reports a violation to the CSP Reporter.