diff --git a/files/nginx/odk.conf.template b/files/nginx/odk.conf.template index 1362b54d8..937d006c6 100644 --- a/files/nginx/odk.conf.template +++ b/files/nginx/odk.conf.template @@ -173,7 +173,7 @@ server { root /usr/share/nginx/html; try_files /blank.html =404; - add_header Content-Security-Policy-Report-Only "default-src 'none'"; + add_header Content-Security-Policy-Report-Only "default-src 'none'; report-uri /csp-report"; include /usr/share/odk/nginx/common-headers.conf; } location = /blank.html { diff --git a/test/nginx/test-nginx.js b/test/nginx/test-nginx.js index 28f367595..0f8033f93 100644 --- a/test/nginx/test-nginx.js +++ b/test/nginx/test-nginx.js @@ -43,6 +43,7 @@ const contentSecurityPolicies = { }, 'disallow-all': { 'default-src': none, + 'report-uri': '/csp-report', }, enketo: { 'default-src': none,