Uploaded Test files

venv/Lib/site-packages/notebook/services/security/__init__.py

@@ -0,0 +1,4 @@
+# URI for the CSP Report. Included here to prevent a cyclic dependency.
+# csp_report_uri is needed both by the BaseHandler (for setting the report-uri)
+# and by the CSPReportHandler (which depends on the BaseHandler).
+csp_report_uri = r"/api/security/csp-report"

venv/Lib/site-packages/notebook/services/security/handlers.py

@@ -0,0 +1,32 @@
+"""Tornado handlers for security logging."""
+
+# Copyright (c) Jupyter Development Team.
+# Distributed under the terms of the Modified BSD License.
+
+from tornado import web
+
+from ...base.handlers import APIHandler
+from . import csp_report_uri
+
+class CSPReportHandler(APIHandler):
+    '''Accepts a content security policy violation report'''
+
+    _track_activity = False
+
+    def skip_check_origin(self):
+        """Don't check origin when reporting origin-check violations!"""
+        return True
+
+    def check_xsrf_cookie(self):
+        # don't check XSRF for CSP reports
+        return
+
+    @web.authenticated
+    def post(self):
+        '''Log a content security policy violation report'''
+        self.log.warning("Content security violation: %s",
+                      self.request.body.decode('utf8', 'replace'))
+
+default_handlers = [
+    (csp_report_uri, CSPReportHandler)
+]