Don't send reports

This commit is contained in:
mathias 2018-04-02 18:24:21 +02:00
parent ddd1773ebe
commit 19d244c081
2 changed files with 1 additions and 18 deletions

View file

@ -16,7 +16,7 @@ SetHandler cgi-script
</FilesMatch> </FilesMatch>
<FilesMatch ".(htm|html)$"> <FilesMatch ".(htm|html)$">
Header set Content-Security-Policy "default-src 'none'; font-src data:; form-action 'self'; img-src 'self'; manifest-src 'self'; style-src 'self'; upgrade-insecure-requests; report-uri /report" Header set Content-Security-Policy "default-src 'none'; font-src data:; form-action 'self'; img-src 'self'; manifest-src 'self'; style-src 'self'; upgrade-insecure-requests"
Header set X-Frame-Options "DENY" Header set X-Frame-Options "DENY"
Header set X-Xss-Protection "1; mode=block" Header set X-Xss-Protection "1; mode=block"
</FilesMatch> </FilesMatch>

17
report
View file

@ -1,17 +0,0 @@
#!/usr/bin/perl
use CGI;
my $q = new CGI;
my $data = CGI::param('POSTDATA');
if (($data ne ""))
{
open (SEND, "|/usr/lib/sendmail -t");
print SEND "From: mail\@mathias.re\n";
print SEND "To: mail\@mathias.re\n";
print SEND "Subject: CSP Report\n\n";
print SEND "$data\n";
close (SEND);
}
print $q->redirect('/');