##// END OF EJS Templates
DEV: Tweaks to Login/LogoutHandler setup....
DEV: Tweaks to Login/LogoutHandler setup. - Require handlers to be tornado.web.RequestHandlers. Rename the - NotebookApp attributes from log{in,out}_handler to log{in,out}_handler_class.

File last commit:

r19156:d3e620f5
r19669:0cc52fe6
Show More
handlers.py
23 lines | 715 B | text/x-python | PythonLexer
Kyle Kelley
Log CSP violations via report
r19141 """Tornado handlers for security logging."""
# Copyright (c) IPython Development Team.
# Distributed under the terms of the Modified BSD License.
from tornado import gen, web
from ...base.handlers import IPythonHandler, json_errors
Kyle Kelley
One unified CSP report URI
r19148 from . import csp_report_uri
Kyle Kelley
Handle CSP Reports
r19140
class CSPReportHandler(IPythonHandler):
'''Accepts a content security policy violation report'''
@web.authenticated
@json_errors
def post(self):
'''Log a content security policy violation report'''
csp_report = self.get_json_body()
Kyle Kelley
Log warning directly.
r19156 self.log.warn("Content security violation: %s",
self.request.body.decode('utf8', 'replace'))
Kyle Kelley
Handle CSP Reports
r19140
default_handlers = [
(csp_report_uri, CSPReportHandler)
]