CSP Observer

CSP Observer is a Django app that monitors incoming Content Security Policy (CSP) reports for your site. It tries to detect security/privacy issues and notifies your visitors.

Installation

1. In settings.py add "csp_observer" to your INSTALLED_APPS:

   INSTALLED_APPS = [
       ...
       'csp_observer',
   ]
   

2. Also in settings.py add the following entry to MIDDLEWARE:

   MIDDLEWARE = [
       ...
       'csp_observer.middleware.CspReportMiddleware',
   ]
   

   Please make sure that it is the last entry in the middlewares, otherwise another installed middleware could interfere with the operation of CSP Observer.
3. Include the url configuration in your urls.py:

   from django.urls import path, include
   
   urlpatterns = [
       ...
       path('csp/', include('csp_observer.urls')),
   ]
   

   You can change this path but keep in mind, that this path determines the access URL to the admin dashboard. Example: If you change the path for CSP Observer to path('cspobserver/', ...), the admin dashboard will now be accessible at /cspobserver/admin.
4. Run python manage.py migrate to create the necessary database tables.
5. The basic installation is finished! View the Configuration section for more information on how to configure the app.

Admin Interface

A basic administration interface is available under /csp/admin

Commands

List of commands integrated into manage.py:

Configuration

Overview of all available settings and their default values: