content security policy audit#1331

Merged

rBangay merged 5 commits into

mainfrom

content-security-policy-audit

Apr 23, 2024

Commits on Apr 11, 2024

[RB] - add content security policy report header to all requests so that we can audit which endpoints need adding to a future content-security-policy header
Richard Bangay
committed
[RB] - change status code for content security audit endpoint from 202 to 204 as it is not returning any content
Richard Bangay
committed

Commits on Apr 17, 2024

[RB] - add domain prefix to the CSP report url
Richard Bangay
committed

Commits on Apr 19, 2024

[RB] - add the csp audit api endpoint to the allowed list of endpoints that do no require sign in.
Richard Bangay
committed

Commits on Apr 22, 2024

[RB] - put csp audit work behind feature switch
Richard Bangay
committed