allow overriding csp report uri via tornado settings

9 years ago · f512880fcb
parent fb7ee6f348
commit f512880fcb
1 changed files with 1 additions and 1 deletions
--- a/notebook/base/handlers.py
+++ b/notebook/base/handlers.py
@ -64,7 +64,7 @@ class AuthenticatedHandler(web.RequestHandler):
        return '; '.join([
            "frame-ancestors 'self'",
            # Make sure the report-uri is relative to the base_url
-            "report-uri " + url_path_join(self.base_url, csp_report_uri),
+            "report-uri " + self.settings.get('csp_report_uri', url_path_join(self.base_url, csp_report_uri)),
        ])

    def set_default_headers(self):