diff --git a/lib/middleware/csp.js b/lib/middleware/csp.js index 44d4bb34..0ab10817 100644 --- a/lib/middleware/csp.js +++ b/lib/middleware/csp.js @@ -1,6 +1,5 @@ const parseurl = require("parseurl"); const Router = require("router"); -const bodyParser = require("body-parser"); const querystring = require("querystring"); const log = require("@ui5/logger").getLogger("server:middleware:csp"); @@ -61,7 +60,10 @@ function createMiddleware(sCspUrlParameterName, oConfig) { const router = new Router(); // .csplog // body parser is required to parse csp-report in body (json) - router.post("/.ui5/csp/report.csplog", bodyParser.json({type: "application/csp-report"})); + if (serveCSPReports) { + const bodyParser = require("body-parser"); + router.post("/.ui5/csp/report.csplog", bodyParser.json({type: "application/csp-report"})); + } router.post("/.ui5/csp/report.csplog", function(req, res, next) { if (req.headers["content-type"] === "application/csp-report") { if (!serveCSPReports) {