Add CSP reports

[perso/Immae/Config/Nix.git] / modules / private / websites / tools / tools / landing / report_csp_violation.php

<?php
http_response_code(204);

$dbconn = pg_connect(getenv("CSP_REPORT_URI")) or die();

function _get(&$var, $default=null) {
  return isset($var) ? $var : $default;
}

$json_data = file_get_contents('php://input');
if ($json_data = json_decode($json_data, true)) {
  $report = _get($json_data["csp-report"], Array());
  $blocked_uri = _get($report["blocked-uri"], "");
  $document_uri = _get($report["document-uri"], "");
  $original_policy = _get($report["original-policy"], "");
  $referrer = _get($report["referrer"], "");
  $violated_directive = _get($report["violated-directive"], "");

  $query = pg_prepare($dbconn, "insert_query", 'INSERT INTO csp_reports (blocked_uri, document_uri, original_policy, referrer, violated_directive, total_count, last) VALUES ($1, $2, $3, $4, $5, 1, NOW()) ON CONFLICT ON CONSTRAINT csp_report_unique DO UPDATE SET total_count = csp_reports.total_count + 1, last = NOW(), referrer = EXCLUDED.referrer, original_policy = EXCLUDED.original_policy');

  pg_execute($dbconn, "insert_query", Array($blocked_uri, $document_uri, $original_policy, $referrer, $violated_directive));
}