16 lines
401 B
Ruby
16 lines
401 B
Ruby
|
# frozen_string_literal: true
|
||
|
|
|
||
|
|
class CspController < ActionController::API
|
||
|
|
FILTER_REPORT_REGEXP = /extension|sandbox/i
|
||
|
|
|
||
|
|
SANITIZE_REGEXP = %r{(/[sdep]/)(\w{5})[^/"]+}
|
||
|
|
|
||
|
|
def create
|
||
|
|
data = request.raw_post.gsub(SANITIZE_REGEXP, '\1\2')
|
||
|
|
|
||
|
|
Rails.logger.warn(data) if Rails.env.development?
|
||
|
|
|
||
|
|
Rollbar.warning('CSP', data:) if defined?(Rollbar) && !data.match?(FILTER_REPORT_REGEXP)
|
||
|
|
end
|
||
|
|
end
|