672889 - Create a view to handle CSP reports

Status: RESOLVED WONTFIX

(support.mozilla.org :: Code Quality, task)

Description

[James Socol [:jsocol, :james]]

When we flip on CSP we should do it in report-only mode first, evaluate the incoming traffic, and go from there. We don't want to get emailed every CSP report, though--a view to collect the data and store it, probably in Redis, would be nice.

I'm thinking for a data structure:

key(hash of report): {'report': blob, 'count': int}

Or something like that.

Comment 1

[James Socol [:jsocol, :james]]

I'd really like to make CSP happen in Q4, if we can at all.