Fixes #1329, #1328. Add a CSP reporting endpoint and move security headers into app.#1367

Merged

karlcow merged 5 commits intomasterfrom issues/1329/1

Mar 2, 2017

+71

Commits on Feb 28, 2017

Issue #1329 . Add a /csp-report endpoint for simple logging of violations.
Mike Taylor
committed
Issue #1328 . Add security-related headers into @app.after_request.
Mike Taylor
committed
Issue #1329 . Add a Content-Security-Policy-Report-Only header.
Mike Taylor
committed
Issue #1329 . Add URL tests for new report endpoint.
Mike Taylor
committed

Commits on Mar 1, 2017

Issue #1329 . Add ability to disable CSP logging via config.
Mike Taylor
committed