Enable CSP in report only mode for the main web site
authorTom Hughes <tom@compton.nu>
Thu, 23 Nov 2017 21:21:43 +0000 (21:21 +0000)
committerTom Hughes <tom@compton.nu>
Thu, 23 Nov 2017 21:21:43 +0000 (21:21 +0000)
cookbooks/web/definitions/rails_port.rb
cookbooks/web/recipes/rails.rb

index 6d0c966..6985528 100644 (file)
@@ -216,6 +216,10 @@ define :rails_port, :action => [:create, :enable] do
       line.gsub!(/^( *)#totp_key:.*$/, "\\1totp_key: \"#{params[:totp_key]}\"")
     end
 
+    if params[:csp_report_url]
+      line.gsub!(/^( *)#csp_report_url:.*$/, "\\1csp_report_url: \"#{params[:csp_report_url]}\"")
+    end
+
     line.gsub!(/^( *)require_terms_seen:.*$/, "\\1require_terms_seen: true")
     line.gsub!(/^( *)require_terms_agreed:.*$/, "\\1require_terms_agreed: true")
 
index 0a96ddf..af4c8d6 100644 (file)
@@ -90,6 +90,7 @@ rails_port "www.openstreetmap.org" do
   mapzen_valhalla_key web_passwords["mapzen_valhalla_key"]
   thunderforest_key web_passwords["thunderforest_key"]
   totp_key web_passwords["totp_key"]
+  csp_report_url "https://openstreetmap.report-uri.io/r/default/csp/reportOnly"
 end
 
 package "libjson-xs-perl"