/lambda-csp-report-uri

Content-Security-Policy report-uri which runs on AWS Lambda and saves reports to S3

Primary LanguagePython

Content-Security-Policy Report URI for AWS Lambda

Simple python application which runs on AWS Lambda and writes CSP reports into S3 for later processing.

Configuration

Deploy to Lambda and create a POST API with API Gateway, set this as the report-uri in your Content-Security-Policy header e.g.

default-src 'self'; report-uri http://example.org/csp-report.cgi

Future ideas

  • Integrate with other services on AWS
  • SNS to alert on new reports
  • Tools for processing reports from S3