How to accept application/csp-report as json in express and bodyParser?

Question

I\'m trying to write a middleware to accept CSP report from browser. Browser issues application/csp-report as Content-Type. The request being poste

Answer 1

Since it is actually JSON you can inform Express of that fact like this:

app.use(bodyParser.json({type: 'application/csp-report'}));

Note however some browsers use application/csp-report, some application/JSON so I set both:

app.use(bodyParser.json({type: 'application/json'}));
app.use(bodyParser.json({type: 'application/csp-report'}));

If it helps I've code for a (very simple) Node Report service here: https://www.tunetheweb.com/security/http-security-headers/csp/