add csp

app/controllers/csp_controller.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+class CspController < ActionController::API
+  FILTER_REPORT_REGEXP = /extension|sandbox/i
+
+  SANITIZE_REGEXP = %r{(/[sdep]/)(\w{5})[^/"]+}
+
+  def create
+    data = request.raw_post.gsub(SANITIZE_REGEXP, '\1\2')
+
+    Rails.logger.warn(data) if Rails.env.development?
+
+    Rollbar.warning('CSP', data:) if defined?(Rollbar) && !data.match?(FILTER_REPORT_REGEXP)
+  end
+end