From e0c2d7a066793683a911bee7f7210d80eb6b2055 Mon Sep 17 00:00:00 2001
From: erdgeist <erdgeist@erdgeist.org>
Date: Sun, 19 Jul 2026 16:16:43 +0200
Subject: Log CSP violations to their own file instead of relying on
 Rails.logger

---
 config/initializers/csp_log.rb | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 config/initializers/csp_log.rb

(limited to 'config/initializers')

diff --git a/config/initializers/csp_log.rb b/config/initializers/csp_log.rb
new file mode 100644
index 0000000..1dde9c4
--- /dev/null
+++ b/config/initializers/csp_log.rb
@@ -0,0 +1,4 @@
+# CSP violation reports get their own file, independent of config.logger.
+CSP_LOGGER = Rails.env.production? ?
+  ActiveSupport::Logger.new(Rails.root.join("log", "csp_violations.log")) :
+  Rails.logger
-- 
cgit v1.3