oroce · June 17, 2014 08:37 · ghost · Dec 31, 2015 · cellis · Oct 18, 2016
diff --git a/app.js b/app.js
 var express = require('express');
 var app = express();
 var bodyParser = require('body-parser');

 // chrome sends application/csp-report
 // firefox sends application/json
 // it seems chrome is doing it well: https://w3c.github.io/webappsec/specs/content-security-policy/
 app.use(bodyParser.json({
  type: ['json', 'application/csp-report']
 }));
	var express = require('express');
	var app = express();
	var bodyParser = require('body-parser');

	// chrome sends application/csp-report
	// firefox sends application/json
	// it seems chrome is doing it well: https://w3c.github.io/webappsec/specs/content-security-policy/
	app.use(bodyParser.json({
	type: ['json', 'application/csp-report']
	}));