From 0c7a241e3af023f37ed82be7fd11194be4e2a374 Mon Sep 17 00:00:00 2001
From: Tobias Sorn <tobias.sorn@sap.com>
Date: Tue, 9 Jun 2020 07:51:28 +0200
Subject: [PATCH] [FEATURE] csp: lazy require body-parser

---
 lib/middleware/csp.js | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/lib/middleware/csp.js b/lib/middleware/csp.js
index 44d4bb34..0ab10817 100644
--- a/lib/middleware/csp.js
+++ b/lib/middleware/csp.js
@@ -1,6 +1,5 @@
 const parseurl = require("parseurl");
 const Router = require("router");
-const bodyParser = require("body-parser");
 const querystring = require("querystring");
 
 const log = require("@ui5/logger").getLogger("server:middleware:csp");
@@ -61,7 +60,10 @@ function createMiddleware(sCspUrlParameterName, oConfig) {
 	const router = new Router();
 	// .csplog
 	// body parser is required to parse csp-report in body (json)
-	router.post("/.ui5/csp/report.csplog", bodyParser.json({type: "application/csp-report"}));
+	if (serveCSPReports) {
+		const bodyParser = require("body-parser");
+		router.post("/.ui5/csp/report.csplog", bodyParser.json({type: "application/csp-report"}));
+	}
 	router.post("/.ui5/csp/report.csplog", function(req, res, next) {
 		if (req.headers["content-type"] === "application/csp-report") {
 			if (!serveCSPReports) {