One unified CSP report URI

IPython/html/services/security/__init__.py

@@ -1,1 +1,4
+# URI for the CSP Report. Included here to prevent a cyclic dependency.
+# csp_report_uri is needed both by the BaseHandler (for setting the report-uri)
+# and by the CSPReportHandler (which depends on the BaseHandler).
 csp_report_uri = r"/api/security/csp-report"

IPython/html/services/security/handlers.py

@@ -1,23 +1,22
 """Tornado handlers for security logging."""
 
 # Copyright (c) IPython Development Team.
 # Distributed under the terms of the Modified BSD License.
 
 from tornado import gen, web
 
 from ...base.handlers import IPythonHandler, json_errors
+from . import csp_report_uri
 
 class CSPReportHandler(IPythonHandler):
     '''Accepts a content security policy violation report'''
     @web.authenticated
     @json_errors
     def post(self):
         '''Log a content security policy violation report'''
         csp_report = self.get_json_body()
         self.log.debug(csp_report)
 
-csp_report_uri = r"/api/security/csp-report" 
-
 default_handlers = [
     (csp_report_uri, CSPReportHandler)
 ]