parse csp report in express

app.js

var express = require('express');
var app = express();
var bodyParser = require('body-parser');

// chrome sends application/csp-report
// firefox sends application/json
// it seems chrome is doing it well: https://w3c.github.io/webappsec/specs/content-security-policy/
app.use(bodyParser.json({
  type: ['json', 'application/csp-report']
}));

👏