gecko-dev/dom/security/test/csp/file_bug836922_npolicies_ro_violation.sjs

// SJS file that receives violation reports and then responds with nothing.

const CC = Components.Constructor;
const BinaryInputStream = CC("@mozilla.org/binaryinputstream;1",
                              "nsIBinaryInputStream",
                              "setInputStream");

const STATE_KEY = "bug836922_ro_violations";

function handleRequest(request, response)
{
  var query = {};
  request.queryString.split('&').forEach(function (val) {
    var [name, value] = val.split('=');
    query[name] = unescape(value);
  });

  if ('results' in query) {
    // if asked for the received data, send it.
    response.setHeader("Content-Type", "text/javascript", false);
    if (getState(STATE_KEY)) {
      response.write(getState(STATE_KEY));
    } else {
      // no state has been recorded.
      response.write(JSON.stringify({}));
    }
  } else if ('reset' in query) {
    //clear state
    setState(STATE_KEY, JSON.stringify(null));
  } else {
    // ... otherwise, just respond "ok".
    response.write("null");

    var bodystream = new BinaryInputStream(request.bodyInputStream);
    var avail;
    var bytes = [];
    while ((avail = bodystream.available()) > 0)
      Array.prototype.push.apply(bytes, bodystream.readByteArray(avail));

    var data = String.fromCharCode.apply(null, bytes);

    // figure out which test was violating a policy
    var testpat = new RegExp("testid=([a-z0-9_]+)");
    var testid = testpat.exec(data)[1];

    // store the violation in the persistent state
    var s = JSON.parse(getState(STATE_KEY) || "{}");
    s[testid] ? s[testid]++ : s[testid] = 1;
    setState(STATE_KEY, JSON.stringify(s));
  }
}