FEATURE: [Experimental] Content Security Policy (#6514)

do not register new MIME type, parse raw body instead

config/routes.rb

@@ -828,6 +828,8 @@ Discourse::Application.routes.draw do
   post "/push_notifications/subscribe" => "push_notification#subscribe"
   post "/push_notifications/unsubscribe" => "push_notification#unsubscribe"
 
+  resources :csp_reports, only: [:create]
+
   get "*url", to: 'permalinks#show', constraints: PermalinkConstraint.new
 
 end