get-sites-with-csp.js

const fetch = require('node-fetch');
const fs = require('fs');

/*
 * Reads a list of URLs from a file and return the CSP header if present
 * Written by Phillip L - 14.15.2019
 */

const file = 'urls.csv';

let csv = readCsv(file);
let domainArray = csv.split(',');

console.log('Sites with CSP Header set:');

for (let domain of domainArray) {
    logCspHeader(domain);
}

// HELPER HERE
function readCsv(filename) {
    try {
        let csv = fs.readFileSync(filename, { encoding: 'utf8' }).toString();
        return csv;
    }catch (e) {
        console.log('File not Found');
        process.exit(1);
    }
}

function logCspHeader(domain) {
    fetch(domain)
    .then(response => response.headers.get('Content-Security-Policy'))
    .then (csp => {
        if (csp) {
            console.log(domain);
        }
    });
}

//Supress rejections for sites that are down
process.on('unhandledRejection', (err, p) => {});