xwp/cloudflare-worker-content-security-policy-handler

Cloudflare content security policy handler

Cloudflare Worker CSP Violation Handler

This project is a Cloudflare Worker that handles Content Security Policy (CSP) header violations and sends email notifications using Worker Cron. It uses Mailgun to send the emails.

Prerequisites

Before getting started, make sure you have the following:

• A Cloudflare account
• A Mailgun account and API key.
• Wrangler installed.

Configuration

1. Clone this repository:

   git clone https://github.com/xwp/cloudflare-worker-content-security-policy-handler.git

2. Install the project dependencies:

   cd cf-worker-content-security-policy-handler
   npm install

3. Create table:

   npx wrangler d1 create kv
   

   Put the output in wranger.toml file as mentioned in step below replacing binding with d1.

   Create table in the database with the above SQL.

   npx wrangler d1 execute kv --local --file=./schema.sql
   

4. Update the wrangler.toml file with your configuration details.

   Update cron schedule as needed.

   Update mailgun API key, from email address, to email address, and mailgun domain.

   [[d1_databases]]
   binding = "d1"
   database_name = "{updateme}"
   database_id = "{update_me}"
   
   [triggers]
   crons = ["0 0 * * 2"]
   
   [vars]
   MAILGUN_API_KEY = ""
   FROM_EMAIL_ADDRESS = ""
   TO_EMAIL_ADDRESS = ""
   MAILGUN_DOMAIN = ""

Deploying the Worker

To deploy the worker, run the following command: