feat: Adds a Content Security Policy (CSP) check for production environments

[michael-s-molina]

SUMMARY

Adds a Content Security Policy (CSP) check for production environments that verifies if a policy is defined or otherwise issues a warning. For deployments that manage CSP with other software, this check can be disabled using the CONTENT_SECURITY_POLICY_WARNING configuration.

TESTING INSTRUCTIONS

Check if the warning is correctly emitted or skipped.

ADDITIONAL INFORMATION

• Has associated issue:
• Required feature flags:
• Changes UI
• Includes DB Migration (follow approval process in SIP-59)
  • Migration is atomic, supports rollback & is backwards-compatible
  • Confirm DB migration upgrade and downgrade tested
  • Runtime estimates and downtime expectations provided
• Introduces new feature or API
• Removes existing feature or API

[codecov]

Codecov Report

Merging #21874 (a9cf42e) into master (383dc29) will decrease coverage by 0.00%.
The diff coverage is 70.00%.

@@            Coverage Diff             @@
##           master   #21874      +/-   ##
==========================================
- Coverage   66.93%   66.92%   -0.01%     
==========================================
  Files        1805     1805              
  Lines       69066    69076      +10     
  Branches     7369     7369              
==========================================
+ Hits        46227    46232       +5     
- Misses      20932    20937       +5     
  Partials     1907     1907              

Flag	Coverage Δ
hive	52.92% <70.00%> (+<0.01%)	⬆️
mysql	78.35% <70.00%> (+<0.01%)	⬆️
postgres	78.40% <70.00%> (-0.01%)	⬇️
presto	52.82% <70.00%> (+<0.01%)	⬆️
python	81.46% <70.00%> (-0.01%)	⬇️
sqlite	76.89% <70.00%> (-0.01%)	⬇️
unit	51.07% <70.00%> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
superset/initialization/__init__.py	91.00% <66.66%> (-0.47%)	⬇️
superset/config.py	91.66% <100.00%> (+0.02%)	⬆️
superset/reports/commands/log_prune.py	85.71% <0.00%> (-3.58%)	⬇️
superset/commands/importers/v1/utils.py	92.20% <0.00%> (-1.30%)	⬇️
superset/common/query_object.py	93.87% <0.00%> (-0.52%)	⬇️
superset/datasets/commands/create.py	100.00% <0.00%> (ø)
superset/datasets/schemas.py	97.40% <0.00%> (+0.01%)	⬆️

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[villebro]

LGTM. I didn't check, but is this mentioned in the docs somewhere? If not, it would be great to make this more accessible for the greater public.

[michael-s-molina]

LGTM. I didn't check, but is this mentioned in the docs somewhere? If not, it would be great to make this more accessible for the greater public.

@villebro I added a section to the Security docs.

[villebro]

Restamping this, thanks for adding these great docs!